Wireguard on the pi was already mentioned.

If you use docker containers, you could use Gluetun to route its traffic through the VPN. Without containers, on Linux you can use firejail to restrict qBittrorrent to the vpn interface. On windows... no idea, sry.

A second option for docker is the hotio image for qbit. Has VPN support built in so you can just throw it your wg0 conf to use.

Check out I2P. No need for this setup.

You can absolutely use Tailscale; your host in the unrestricted country needs to be set up as an exit node (CLI argument in Linux, or a menu option in the system tray in Windows.)

Then, your local machine needs to be set up to use that remote machine as its exit node. (tailscale up --exit-node=remote-tailnet-ip-here)

Check if that raspberry pi is behind CGNAT. In that case you'll need something else to tunnel through, like Tailscale that was mentioned elsewhere.

You can use socks server for download toorrents. Best choise insert socks traffic to wireguard connection and use sockd for outgoing and clean wireguard + port forwarding for incoming connections.

And you can use i2p network for download torrents in that networks. qBittorrent support it in experimental mode.

run installer curl -L https://install.pivpn.io/ | bash

• configure wireguard
• setup non root user
• Set a port

Create a user with pivpn add

Example:

root@funhaus:~# pivpn add
Enter a Name for the Client: user.name

The conf file can also be found in /home/user.name/configs

Copy the conf to your machine. Install WireGuard and use that conf.

In qbitorrent you should make sure the application is set to use the VPN network, otherwise it'll use both. Go to Settings > Advanced > Set Wireguard from "Network Interface"

Raspberry Pi:

1. Install wireguard (as a server)
2. Set up a peer/client config
3. Open wireguard port on the router

MiniPC:

1. Install wireguard (as a client)
2. Add server config and connect to server
3. Verify connection
4. Ensure connect on boot

Points to note:

• Configure them both locally and ensure you have a connection before you move the pi to another country

• If you're behind a CGNAT on one network, that'll change some things. That network will have to be the client. (If both are behind CGNAT, you're out of luck and cant use this - will have to be tailscale or other method)

• If using a domain name make sure its always pointing to your ip (in case it's not static)

• I think if you set allowed ip as 0.0.0.0/0 on the client it'll route all traffic.

Edit:

Saw your comment about just having qbt use the vpn. Check this guide out

I cannot resist enjoyng the idea that there could be countries where piracy is enforced :)