u/Kenzuka96

I just configured my Arr stack with Decypharr, TorBox, and Jellyfin in docker I live in a region with strict anti-torrenting laws, so I want to double-check my understanding before letting it run completely unattended.

My understanding of Decypharr is that it acts as a "mock" qBittorrent client. Instead of actually utilizing the BitTorrent protocol locally, it sends the request to TorBox (a debrid service), which downloads/caches the file on their servers. Decypharr then streams or symlinks that content to Jellyfin via WebDAV (in my case it will directly download the file to avoid buffering)

Because my ISP heavily monitors P2P/torrent traffic, my main concern is a misconfiguration scenario. Is there any possible situation where Decypharr could bypass the debrid service and accidentally start a direct, local torrent download?

I did a test to check if it was using strange ports or protocols different than https using some obscure linux command:
sudo nsenter -t $(docker inspect -f '{{.State.Pid}}' <name of the container>) -n ss -tumpa
And I only observer https connection but still I am not really sure what the command does.

I checked the documentation but couldn't find an explicit answer on whether the application even contains native BitTorrent downloading code or if it strictly acts as an API bridge/gateway.

Would love some reassurance or clarification from anyone who has looked under the hood or has a similar setup in a strict country. Thanks!