diff --git a/roles/ind/downloader/docker-compose.yml b/roles/ind/downloader/docker-compose.yml
index 922c43c..3bf5ea6 100644
--- a/roles/ind/downloader/docker-compose.yml
+++ b/roles/ind/downloader/docker-compose.yml
@@ -23,8 +23,9 @@ services:
     - VPN_TYPE=openvpn # change it to your protocol
     - OPENVPN_CUSTOM_CONFIG=/gluetun/ipvanish.openvpn.conf
     - VPN_INTERFACE=tun0
-    - FIREWALL_OUTBOUND_SUBNETS=192.168.0.1/24
+    - FIREWALL_OUTBOUND_SUBNETS=192.168.0.0/24
     - SERVER_CITIES="Chicago Illinois"
+    - FIREWALL_VPN_INPUT_PORTS=4733
 
  rutorrent:
     image: crazymax/rtorrent-rutorrent:latest
diff --git a/roles/ind/grail/docker-compose.env b/roles/ind/grail/docker-compose.env
index e69de29..097f63f 100644
--- a/roles/ind/grail/docker-compose.env
+++ b/roles/ind/grail/docker-compose.env
@@ -0,0 +1,121 @@
+########################################################################
+########################################################################
+########################################################################
+##
+##  Docker Compose Environment Variable file for Jellyfin Media Stack
+##
+##  Update any of the environment variables below as required.
+##
+##  It is highly recommended Linux users set up a "docker"
+##  user, so the applications can access the local filesystem
+##  with this user's access privileges. Use PUID / PGID to map
+##  user access between the Docker apps and local filesystem.
+##
+########################################################################
+########################################################################
+########################################################################
+
+#Name of the project in Docker
+COMPOSE_PROJECT_NAME=media-stack
+
+# This is the network subnet which will be used inside the docker "media_network", change as required.
+# LOCAL_SUBNET is your home network and is needed so the VPN client allows access to your home computers.
+DOCKER_SUBNET=172.28.10.0/24
+DOCKER_GATEWAY=172.28.10.1
+LOCAL_SUBNET=192.168.0.0/24
+LOCAL_DOCKER_IP=192.168.0.57
+
+# Each of the "*ARR" applications have been configured so the theme can be changed to your needs.
+# Refer to Theme Park for more info / options: https://docs.theme-park.dev/theme-options/aquamarine/
+TP_DISABLE_THEME=false
+TP_THEME=nord
+
+# These are the folders on your local host computer / NAS running docker, they MUST exist
+# and have correct permissions for PUID and PGUI prior to running the docker-compose.
+#
+# Use the commands in the Guide to create all the sub-folders in each of these folders.
+
+# Host Data Folders - Will accept Linux, Windows, NAS folders
+FOLDER_FOR_CONFIGS=/home/grail/docker
+FOLDER_FOR_MEDIA=/media
+
+# File access, date and time details for the containers / applications to use.
+# Run "sudo id docker" on host computer to find PUID / PGID and update these to suit.
+PUID=1000
+PGID=1000
+UMASK=0002
+TIMEZONE=America/Chicago
+
+# Update your own Internet VPN provide details below
+VPN_TYPE=openvpn
+VPN_SERVICE_PROVIDER=airvpn
+VPN_USERNAME=
+VPN_PASSWORD=
+            
+
+SERVER_COUNTRIES=
+SERVER_REGION=
+SERVER_CITIES="Chicago Illinois"
+SERVER_HOSTNAMES=
+
+# Fill in this item ONLY if you're using a custom OpenVPN configuration
+# Should be inside gluetun data folder - Example: /gluetun/custom-openvpn.conf
+# You can then edit it inside the FOLDER_FOR_CONFIGS location for gluetun.
+OPENVPN_CUSTOM_CONFIG=/gluetun/ipvanish.openvpn.conf
+#OPENVPN_CUSTOM_CONFIG=
+
+# Fill in these items ONLY if you change VPN_TYPE to "wireguard"
+VPN_ENDPOINT_IP=
+VPN_ENDPOINT_PORT=
+WIREGUARD_PUBLIC_KEY=
+WIREGUARD_PRIVATE_KEY=
+WIREGUARD_PRESHARED_KEY=
+WIREGUARD_ADDRESSES=
+
+# These are the default ports used to access each of the application in your web browser.
+# You can safely change these if you need, but they can't conflict with other active ports.
+QBIT_PORT_TCP=19841
+QBIT_PORT_UDP=19841
+
+FLARESOLVERR_PORT=8191
+
+TDARR_SERVER_PORT=8266
+WEBUI_PORT_TDARR=8265
+
+WEBUI_PORT_BAZARR=6767
+WEBUI_PORT_DDNS_UPDATER=6500
+WEBUI_PORT_JELLYFIN=8096
+WEBUI_PORT_JELLYSEERR=5055
+WEBUI_PORT_LIDARR=8686
+WEBUI_PORT_MYLAR3=8090
+WEBUI_PORT_PORTAINER=9443
+WEBUI_PORT_PROWLARR=9696
+WEBUI_PORT_QBITTORRENT=8200
+WEBUI_PORT_RADARR=7878
+WEBUI_PORT_READARR=8787
+WEBUI_PORT_SONARR=8989
+WEBUI_PORT_SABNZBD=8100
+WEBUI_PORT_WHISPARR=6969
+
+# SWAG is configured for Reverse Proxy. Set your Internet gateway to redirect incoming ports 80 and 443
+# to the ports used below (using Docker IP Address), and they will be translated back to 80 and 443 by SWAG.
+# Change these port numbers if you have conflicting services running on the Docker host computer.
+
+REVERSE_PROXY_PORT_HTTP=5080
+REVERSE_PROXY_PORT_HTTPS=5443
+
+# SWAG REVERSE PROXY SETTINGS:
+URL=your-domain-name-goes-here.com
+SUBDOMAINS=wildcard
+VALIDATION=dns
+DNSPLUGIN=cloudflare
+CERTPROVIDER=
+PROPAGATION=
+DUCKDNSTOKEN=
+EMAIL=
+ONLY_SUBDOMAINS=false
+EXTRA_DOMAINS=
+STAGING=false
+HEALTH_VPN_DURATION_INITIAL=45s
+HEALTH_VPN_DURATION_ADDITION=30s
+UPDATER_PERIOD=8h
\ No newline at end of file
diff --git a/roles/ind/grail/docker-compose.yml b/roles/ind/grail/docker-compose.yml
index 2e5ae7c..700f0a8 100644
--- a/roles/ind/grail/docker-compose.yml
+++ b/roles/ind/grail/docker-compose.yml
@@ -22,8 +22,8 @@ services:
       - "8388:8388/tcp"                         # Gluetun Local Network Shadowsocks
       - "8388:8388/udp"                         # Gluetun Local Network Shadowsocks
       - "8200:8200"                             # WebUI Portal: qBittorrent
-      - "${QBIT_PORT_TCP:?err}:44172/tcp"        # Transmission Torrent Port TCP
-      - "${QBIT_PORT_UDP:?err}:44172/udp"        # Transmission Torrent Port UDP
+      - "${QBIT_PORT_TCP:?err}:19841/tcp"        # Transmission Torrent Port TCP
+      - "${QBIT_PORT_UDP:?err}:19841/udp"        # Transmission Torrent Port UDP
     env_file:
       - ./docker-compose.env
     volumes: