Media all drives: Prowlarr on Tester 1 (drill only) wired to Sonarr/Radarr by wire.py; sign-in check (outsiders are asked; home network and containers are not); R-1028..R-1032

2026-10-14 18:30:08 +02:00
parent e6dbc7304b
commit 75a3323921
11 changed files with 308 additions and 6 deletions
@@ -103,6 +103,18 @@ directory) with that tag. Facts the link code needs:
 - **The OnlyOffice revoke-on-stop rule must NOT apply** (`integrations/lifecycle.go:10-13`): it would delete the download
  entries whenever a download app restarts. And the OnlyOffice links themselves have no live proof since Proxmox
  (R-1018).
+- **Prowlarr holds the indexers ONCE** and pushes them (Settings → Apps, „Full Sync”) to Sonarr and Radarr by container
+  name (`http://sonarr:8989`, `http://radarr:7878`, `prowlarrUrl http://prowlarr:9696`); both entries pass Prowlarr's own
+  connection test; the sync command completes (measured with zero indexers — the push of a real one waits for the
+  household's own). It needs no drive and no media folder. FlareSolverr only for an indexer that asks for it.
+- **Call the apps with `Host: <container name>`**: once the household sets „Allowed hosts”, Sonarr/Radarr answer a bare
+  IP with 400 „Invalid Hostname” (measured).
+- **A setting made through Transmission's RPC is lost on a power cut** (it writes `settings.json` only on a clean exit):
+  `incomplete-dir-enabled=false` was back to `true` after the 17:25 cut. The link code writes it into `settings.json`
+  at start (as the template's entrypoint does for port forwarding), not by RPC alone.
+- **Sign-in (R-1030):** with „Disabled for Local Addresses” an outside visitor IS asked (the tunnel keeps the public
+  address in `X-Forwarded-For`), but the home network and every other container get in with no sign-in, the API key
+  included. The box seeds „Enabled”.
 - Plex and Jellyfin are NOT linked: they watch folders. Indexers stay the household's choice.
 - **Plex behind the tunnel** needs `ADVERTISE_IP=https://<sub>.<domain>:443/` so plex.tv hands apps a reachable
  address (measured: `customConnections` set; public `/identity` 200; anonymous library calls 401).