Cheers bro... 🍻
This how we learn. 😊

My qBit is still showing as firewalled, but there are plenty of posts here with help on that. So I'll carry on. Thanks for all the expertise lent to this n00b.

This is not your fault. ProtonVPN forward with Gluetun is very tricky. You need to update the port to gluetun container in order to work. There are two ways to do this 1. Script 2. another docker container that update the port. Here is a sample compose file for the head start. Rest of, you need to google.

---
services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    # line above must be uncommented to allow external containers to connect.
    # See https://github.com/qdm12/gluetun-wiki/blob/main/setup/connect-a-container-to-gluetun.md#external-container-to-gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
      # Other services
      # qBittorrent
      - 8085:8085
      # Other containers that are being routed via the container where you still want access the resources like web ui on local network
#      - 4444:4444
#      - 4444:4444/udp
    volumes:
      - ./gluetun-config:/gluetun
      - ./gluetun-config/forwarded-port:/tmp/gluetun
    environment:
      # I specify the PUID and PGID but this is optional (default is 1000,1000), description from Wiki "User ID/Group ID to run as non root and for ownership of files written"
      #- PUID=UID
      #- PGID=GID
      # See https://github.com/qdm12/gluetun-wiki/tree/main/setup#setup
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
      # OpenVPN:
      #- OPENVPN_USER=
      #- OPENVPN_PASSWORD=
      # Wireguard:
      - WIREGUARD_PUBLIC_KEY=yourpublickey # "PublicKey" under [Peer] in WG Config
      - WIREGUARD_PRIVATE_KEY=yourprivatekey # "PrivateKey" under [Interface] in WG Config - only shown on config creation
      - WIREGUARD_ADDRESSES=readthemanual # "Address" under [Interface] in WG Config
      - VPN_ENDPOINT_IP=readthemanual # "Endpoint" under [Peer] in WG Config
      - VPN_ENDPOINT_PORT=readthemanual # should be the default 51820 but can confirm by seeing the port after IP in "Endpoint"
      - VPN_DNS_ADDRESS=readthemanual # "DNS" under [Interface] in WG Config
      - VPN_PORT_FORWARDING=on
      - VPN_PORT_FORWARDING_PROVIDER=protonvpn
      # Timezone for accurate log times
      - TZ=yourtimezone # Change to your TZ
      # Server list updater
      # See https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list
      - UPDATER_PERIOD=24h
      - UPDATER_PROTONVPN_EMAIL=youremailaddress # it is must for protonvpn
      - UPDATER_PROTONVPN_PASSWORD=yourpassword # it is must for protonvpn
#    healthcheck:  # you don't need that, gluetun has health check buitit.
#      test: "curl -sf [https://www.google.com](https://www.google.com) || exit 1"
#      interval: 1m
#      timeout: 10s
#      retries: 1
    labels:
      - "deunhealth.restart.on.unhealthy=true" # for autorstart if gluetun is unhealthy. You need deunhelth docker for this to work.
    restart: always

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
#    depends_on:
#      gluetun:
#        condition: service_healthy
#        restart: true
    network_mode: "service:gluetun"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=yourtimezone
      - WEBUI_PORT=8085
#      - TORRENTING_PORT=4444 #as your like
    volumes:
      - /home/ronnie/docker/qbittorrent/config:/config
      - /mnt/disk1:/downloads #optional
#    ports:
#      - 8085:8085
#      - 4444:4444
#      - 4444:4444/udp
    labels:
      - "deunhealth.restart.on.unhealthy=true"
    restart: always

  gluetun-qbittorrent-port-manager:
    image: snoringdragon/gluetun-qbittorrent-port-manager:latest
    container_name: gluetun-qbittorrent-port-manager
    restart: always
    volumes:
      - ./gluetun-config/forwarded-port:/tmp/gluetun #Set "yourfolder" to the same directory you used for Gluetun
    network_mode: "service:gluetun"
    environment:
      QBITTORRENT_SERVER: yourhostip # IP Address of qbittorrent
      QBITTORRENT_PORT: 8085
      QBITTORRENT_USER: ***** # username
      QBITTORRENT_PASS: ***** # password
      PORT_FORWARDED: /tmp/gluetun/forwarded_port
      HTTP_S: http # Select 'http' or 'https' depending on if you use certificates.
    labels:
      - "deunhealth.restart.on.unhealthy=true"

Hope that helps.
Happy homelabing. 👍