arr fleet: FrankBook-Pro is the sole deployment, all egress VPN-gated
FrankBook-Pro becomes the only *arr/qBittorrent deployment. Every fleet container (qB + five arrs) now shares gluetun's netns, so all egress — torrent, indexer APIs, metadata lookups — exits the WireGuard tunnel by construction (AllowedIPs=0.0.0.0/0); the arrs' own ports publish on the gluetun unit, none on the arr units themselves. - dankserver/compose.yaml: remove the six arr services (the Aug 20 compose copy — never healthy, superseded; config dirs trashed on the host) - dankclaw/Caddyfile + shared/homepage/services.json: arr vhosts and probes repoint 192.168.0.235 -> 192.168.0.112 (FrankBook-Pro) - frankbook-pro units: five arrs join gluetun netns (Wants/After/Network); gluetun publishes 9696/8989/7878/8686/8787 alongside 8080/6881 - tests/frankbook_quadlet.bats: new VPN egress seam — every arr+qB unit must share gluetun's netns and publish no port; gluetun must publish the whole fleet's ports - deploy-plan.py: gluetun changes carry the whole netns family (a gluetun recreation kills all six joiners); dankserver compose set loses the arrs - AGENTS.md: deployment is complete only when unit tests AND the Playwright E2E suite both pass
This commit is contained in:
@@ -104,7 +104,7 @@
|
||||
"description": "TV series library and automation.",
|
||||
"url": "http://sonarr.franksdank.cloud",
|
||||
"docs": "",
|
||||
"probe": "192.168.0.235:8989",
|
||||
"probe": "192.168.0.112:8989",
|
||||
"method": "http",
|
||||
"wip": false,
|
||||
"showLink": true
|
||||
@@ -259,7 +259,7 @@
|
||||
"description": "Indexer manager.",
|
||||
"url": "http://prowlarr.franksdank.cloud",
|
||||
"docs": "",
|
||||
"probe": "192.168.0.235:9696",
|
||||
"probe": "192.168.0.112:9696",
|
||||
"method": "http",
|
||||
"wip": false,
|
||||
"showLink": true
|
||||
@@ -270,7 +270,7 @@
|
||||
"description": "Movie library and automation.",
|
||||
"url": "http://radarr.franksdank.cloud",
|
||||
"docs": "",
|
||||
"probe": "192.168.0.235:7878",
|
||||
"probe": "192.168.0.112:7878",
|
||||
"method": "http",
|
||||
"wip": false,
|
||||
"showLink": true
|
||||
@@ -281,7 +281,7 @@
|
||||
"description": "Book library and automation.",
|
||||
"url": "http://readarr.franksdank.cloud",
|
||||
"docs": "",
|
||||
"probe": "192.168.0.235:8787",
|
||||
"probe": "192.168.0.112:8787",
|
||||
"method": "http",
|
||||
"wip": false,
|
||||
"showLink": true
|
||||
@@ -292,7 +292,7 @@
|
||||
"description": "Music library and automation.",
|
||||
"url": "http://lidarr.franksdank.cloud",
|
||||
"docs": "",
|
||||
"probe": "192.168.0.235:8686",
|
||||
"probe": "192.168.0.112:8686",
|
||||
"method": "http",
|
||||
"wip": false,
|
||||
"showLink": true
|
||||
@@ -303,7 +303,7 @@
|
||||
"description": "Torrent client.",
|
||||
"url": "http://qbittorrent.franksdank.cloud",
|
||||
"docs": "",
|
||||
"probe": "192.168.0.235:8080",
|
||||
"probe": "192.168.0.112:8080",
|
||||
"method": "http",
|
||||
"wip": false,
|
||||
"showLink": true
|
||||
|
||||
Reference in New Issue
Block a user