See ArrX.
Suggested desktop client is Transmission Remote GUI. It is to be set up with ssl enabled on port 443
/watch is hard-coded in the software and not editable from the settings.json, see related issue. To get around this the folder is mounted to /mnt/local/downloads/torrents/transmission{{ rolename }}/watch
Do not change the published ports if you want to be connectable.