In general terms, set up a seedbox VM that is configured so it can only access the internet through Tor/VPN. Join a private tracker (I recommend IPT). Only allow file transfer one-way to your NAS or whatever, then use something like Jellyfin to pull from that.