Files
felhom.eu/documentation/audits/prowlarr-2026-10-15
adminandClaude Opus 5.5 2f1f6c8052
gates / gates (push) Successful in 6m34s
Prowlarr evidence (R-1048) + its apps-page card; the stated app count 62 -> 63; R-1057 filed
- documentation/audits/prowlarr-2026-10-15/: bench (update test proven, C3 failed as it must, soak 7.6 %,
  volume-persistence CLEAN, official-image check), 9202 runs 1-3 (run 1's bump emptied the drill .felhom.yml — a
  test-tool bug, fixed; run 3 re-proved the step and backup -> remove -> restore with the full template), tools.
- website: a Prowlarr card on both apps pages; every stated count 62 -> 63, the media group 19 -> 20; sizing.json +
  sizing-data.json carry Prowlarr (41/44 MB, onboarding), the sizing test and SIZING.md table moved to 63 apps.
- OPEN-ITEMS: R-1057 (a restore of a removed gated app returns without the gate, even from a backup made before the
  setup — measured on 9202); R-1036 notes the count and that wger/plant-it are hidden/abandoned.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-15 12:58:18 +02:00
..

Prowlarr into the live catalog — evidence (R-1048, 2026-10-15)

The record that cites this folder: app-catalog-felhom.eu/onboarding/prowlarr.md (61 checks). The design it follows: documentation/architecture/15-media-library.md §6 (the links) and 09-update-architecture.md §6.4 (the ladder).

The venues and what each run proves

folder venue what it proves
bench/ LXC 9401 on demo-hp (/opt/upg) licence, tags, the official-image check, first start from birth (memory, tools, files, analytics on by default), the update test MV-prowlarr (proven; abort starts-and-serves; 10-minute soak 7.6 %), C3 negative control (failed, as it must), volume-persistence CLEAN
box/walk.txt, walk-results.json 9202, drill catalog, run 1 install window as a stranger, the setup gate, the first account, sign-in right and wrong, „Kész", the stranger after it, six wrong passwords, the address the app logs, remove with data. Its Update ran with an EMPTY .felhom.yml — see run 2
box/run2-empty-meta/ 9202, run 2 not a measurement of the template — the test tool emptied the drill .felhom.yml (README there). One product fact: a restore brings the app back at the image in the backup
box/run3/ 9202, drill catalog with the full template the step version-2.5.2.5491 -> version-2.6.5.5623 through the guarded Update (the box verdict box/prowlarr/box-verdict-prowlarr.json), seed -> the Update's per-app backup -> remove keeping backups -> restore -> seed read back; probe negative control; volume size
box9201/ demo-hp 9201, LIVE catalog, after the publish the link read-back: Sonarr then Prowlarr, „Bekötés most", the link and its test, the sync command; remove both keeping data
tools/ DooPlex the scripts that ran (passwords and keys never printed)

The test-tool bug (fixed)

tools/walk_prowlarr.py bumped the drill template with open(fy, "w").write(re.sub(…, open(fy).read(), …)): the write truncates before the read, so drill commit f2b0cc1 emptied templates/prowlarr/.felhom.yml. The product then ran the app with no deploy fields (env: {}, traefik rule Host(\.enkisfelhom.hu`)). Found in run 2 by the gate's not routed (404)` lines and the 0-byte file in the stack folder. Fixed in the tool (read first, then write); drill commit e917a58 restored the file; run 3 repeated the step. Run 1's checks before the bump stand.

Findings and where they went

  • Prowlarr sends anonymous usage data by default → the template seeds it off (template; no row, fixed).
  • /initialize.json gives the API key to anyone before the first account → the setup gate hides it; after the setup it redirects to the login (measured; FIRST-ADMIN row).
  • No lock-out after wrong passwords → a stranger cannot lock the household out (the property 09 §3 decisions 57–60 protect); no row.
  • The box links Prowlarr only when Sonarr/Radarr come up, or on „Bekötés most" → the copy says so; the register row is in OPEN-ITEMS.md (filed in this session, see box9201/).