Solid write-up. The network_mode: service:gluetun pattern for routing dependent containers is clean and underused. One caveat worth adding: any ports those downstream containers need have to be declared on the Gluetun container, not on themselves. Catches a lot of people the first time.