diff --git a/config/ansible/tasks/servers/services/arr-stack/docker-compose.yml.j2 b/config/ansible/tasks/servers/services/arr-stack/docker-compose.yml.j2
index 98a07d4..fc53245 100644
--- a/config/ansible/tasks/servers/services/arr-stack/docker-compose.yml.j2
+++ b/config/ansible/tasks/servers/services/arr-stack/docker-compose.yml.j2
@@ -64,11 +64,11 @@ services:
       - {{ arr_stack_data_dir }}/prowlarr-config:/config
     extra_hosts:
       - host.docker.internal:host-gateway
-    ports:
-      - 9696:9696
     restart: unless-stopped
-    networks:
-      - arr-stack-net
+    network_mode: "service:gluetun-prowlarr"
+    depends_on:
+      gluetun-prowlarr:
+        condition: service_healthy
 
   flaresolverr:
     image: ghcr.io/flaresolverr/flaresolverr:latest
@@ -104,6 +104,28 @@ services:
       - arr-stack-net
       - caddy_network
 
+  gluetun-prowlarr:
+    image: qmcgaw/gluetun:latest
+    privileged: true
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    volumes:
+      - {{ arr_stack_data_dir }}/gluetun-prowlarr-config:/gluetun
+    ports:
+      - 9696:9696 # Prowlarr
+    environment:
+      - PUID=1000
+      - PGID=100
+      - VPN_SERVICE_PROVIDER={{ lookup('community.general.onepassword', 'qm7lxjrv2ctgzsjuwtolxpd5i4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='VPN_SERVICE_PROVIDER') }}
+      - OPENVPN_USER={{ lookup('community.general.onepassword', 'qm7lxjrv2ctgzsjuwtolxpd5i4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='OPENVPN_USER') }}
+      - OPENVPN_PASSWORD={{ lookup('community.general.onepassword', 'qm7lxjrv2ctgzsjuwtolxpd5i4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='OPENVPN_PASSWORD') }}
+      - SERVER_COUNTRIES={{ lookup('community.general.onepassword', 'qm7lxjrv2ctgzsjuwtolxpd5i4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='SERVER_COUNTRIES') }}
+    restart: always
+    networks:
+      - arr-stack-net
+
 networks:
   arr-stack-net:
   caddy_network: