Just put it where you need it.
Example: I have a docker stack for transmission + openvpn with the usual kill switches and randomized destinations. Transmission is protected, I still have a webui for torrents, nothing else on my network relies on a paid service and the overhead of running the traffic through a vpn.
Guide: No. I was able to do this years ago in many different ways by googling it and learning how the technology works, you can do the same with more tools and resources than I did then. Then you also have the knowledge to fix it when it eventually goes sideways instead of asking reddit for another guide.