diff --git a/compose.yaml b/compose.yaml
index d75b441..1c53920 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -3,24 +3,52 @@ networks:
     name: media_network
 
 services:
+  gluetun:
+    image: qmcgaw/gluetun:latest
+    container_name: gluetun
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    environment:
+      - TZ=Europe/Berlin
+      - VPN_SERVICE_PROVIDER=custom
+      - VPN_TYPE=wireguard
+      - WIREGUARD_PRIVATE_KEY=${WG_PRIVATE_KEY}
+      - VPN_ENDPOINT_IP=${WG_ENDPOINT_IP}
+      - VPN_ENDPOINT_PORT=443
+      - WIREGUARD_ADDRESSES=10.200.200.50/24
+      - WIREGUARD_PUBLIC_KEY=${WG_PUBLIC_KEY}
+      - FIREWALL_OUTBOUND_SUBNETS=10.0.0.0/8,192.168.0.0/16,172.16.0.0/12
+      - DNS_ADDRESS=10.5.85.5
+      - DOT=off
+    ports:
+      - 7777:7777
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "https://www.google.com"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+
   sabnzbd:
     image: lscr.io/linuxserver/sabnzbd:latest
     container_name: sabnzbd
+    network_mode: "service:gluetun"
+    depends_on:
+      gluetun:
+        condition: service_healthy
     environment:
       - PUID=1000
       - PGID=1000
       - TZ=Europe/Berlin
-    networks:
-       - media_network
-    ports:
-       - 7777:7777
     volumes:
       - /app-config/sabnzbd/config:/config
       - usenet:/usenet
       - tdarr:/tdarr
       - chris:/chris
       - data:/data
-    restart: always
+    restart: unless-stopped
 
 volumes:
   usenet: