docs: rename frank-default-large/small/sightsound to frank-large/small/npu across vault

Mechanical identity rename across the knowledge base, AGENTS.md, README, the
hermes config example, and homepage services.json. No behavior change; served
aliases on the LLM endpoints change with the deploy of commit 69f87c8.

serverAppConfigs-docs/Dankserver/prowlarr.md

@@ -1,20 +1,55 @@
+---
+type: reference
+title: Prowlarr
+description: Prowlarr indexer-management layer for the *arr stack on FrankBook-Pro — feed routes, sync model, API surface, and verified live gotchas.
+tags: [prowlarr, arr-stack, frankbook-pro]
+timestamp: 2026-09-03T00:00:00Z
+---
+
 # Prowlarr
 
 Prowlarr is the indexer management layer for the *arr stack. It hosts the
 indexer definitions and exposes them as Torznab feeds and downloads;
 Sonarr, Radarr, Lidarr, and Readarr query those feeds and receive results.
 
-**Host:** Dankserver — **Hostname:** `prowlarr.dankserver.local` — **Docs:** https://wiki.servarr.com/prowlarr
+**Host:** FrankBook-Pro (podman machine) — **Access:** direct port `9696` (no
+reverse-proxy vhost; the *arr stack is exempt by construction from the Anubis
+guard chain) — **Docs:** https://wiki.servarr.com/prowlarr
 
 ## Facts
 
 | Item | Value |
 |------|-------|
-| Image | `lscr.io/linuxserver/prowlarr:latest` |
+| Image | `lscr.io/linuxserver/prowlarr:latest` (runs v2.5.2 line) |
 | Port | 9696 (host) → 9696 (container) |
+| Env | `PUID=0`, `PGID=0`, `TZ=America/Los_Angeles`, `UMASK_SET=022` |
+| Config root | `/Volumes/COMPLETE/prowlarr-data:/config` |
 | Min RAM | 256 MB |
 | Auth | Forms (web UI) + API key (`/api/v1/...` and feed routes) |
 
+## Deployment (current)
+
+Quadlet unit `prowlarr.container` from this repo
+(`frankbook-pro/prowlarr/quadlet/`), installed inside the podman machine at
+`/home/core/.config/containers/systemd/prowlarr.service` by the frankbook-pro
+handler in `scripts/deploy-remote.sh`:
+
+```ini
+[Container]
+ContainerName=prowlarr
+Image=lscr.io/linuxserver/prowlarr:latest
+Environment=PUID=0
+Environment=PGID=0
+Environment=TZ=America/Los_Angeles
+Environment=UMASK_SET=022
+Volume=/Volumes/COMPLETE/prowlarr-data:/config
+PublishPort=9696:9696
+
+[Service]
+TimeoutStartSec=900
+Restart=always
+```
+
 ## Live wiring (verified end-to-end 2026-08-30)
 
 Indexer queries flow **through** Prowlarr; a grab hands off to the querying
@@ -35,35 +70,17 @@ http://prowlarr:9696/{indexerId}/download?link=...&file=...   (torrent handoff)
 The global API key is in `config.xml` (`<ApiKey>`); per-application keys are
 only used by Prowlarr's own sync calls, NOT by the feeds. The arr download
 clients authenticate to qBittorrent with the permanent WebUI password stored
-in `/home/dank/.qbpass` (mode 600) on Dankserver.
+in `/home/dank/.qbpass` (mode 600, owner `dank`) on Dankserver — see
+[[qBittorrent]] for why that password must be pinned in the conf file.
 
-**Readarr caveat:** Readarr is abandoned upstream (last release 0.4.x); its
-qBittorrent client cannot authenticate against qB 5 (`Authentication
-failure` on the connection test while Sonarr/Lidarr/Radarr pass with the
-same credentials). The books pipeline is parked pending a Readarr successor;
-the indexer row itself is healthy.
+**Readarr caveat:** Readarr is abandoned upstream; its qBittorrent client
+cannot authenticate against newer qB Web-API versions (`Authentication
+failure` on the connection test while Sonarr/Lidarr/Radarr pass with the same
+credentials — root cause: qB ≥ 5's 204 empty-body login success, fixed fleet-
+wide by pinning qB to 4.6.7). The books pipeline is parked pending a Readarr
+successor; the indexer row itself is healthy.
 
-## Docker Compose
-
-```yaml
-prowlarr:
-  image: lscr.io/linuxserver/prowlarr:latest
-  container_name: prowlarr
-  restart: unless-stopped
-  environment:
-    - PUID=1000
-    - PGID=1000
-    - TZ=America/New_York
-    - UMASK_SET=022
-  volumes:
-    - /opt/prowlarr/config:/config
-    - /mnt/media/downloads:/downloads:ro
-  ports:
-    - "9696:9696"
-  networks: [appnet]
-```
-
-## Gotchas (all verified live 2026-08-30)
+## Gotchas (verified live 2026-08-30)
 
 - **The feed route is `/{indexerId}/api`.** There is no `/torznab/{id}/feed`
   — that path (and any other unmatched path) hits the Forms-auth catch-all
@@ -92,12 +109,13 @@ prowlarr:
 - Instance name/`InstanceName=Prowlarr` in `config.xml` does NOT prefix the
   API/feed routes on this build (they answer at root; the `/Prowlarr/...`
   prefix 302s to the SPA).
-- **Application auto-sync cannot manage these rows** (they carry
-  `SyncLevel=2`): `POST /api/v1/applications/test` fails with
-  `Unable to cast object of type 'NzbDrone.Core.Thing…'` — Prowlarr v1
-  cannot deserialize Radarr 6.3's newer response types. The manual Torznab
-  rows above are therefore the real integration; sync neither duplicates
-  nor clobbers them.
+- **Application auto-sync model (v2):** Applications are first-class rows in
+  the `Applications` table; each of the four app rows (sonarr/radarr/lidarr/
+  readarr) carries the real baseUrl+apiKey with `SyncLevel=FullSync`. The
+  earlier v1-era failure where `POST /api/v1/applications/test` threw
+  `Unable to cast object of type 'NzbDrone.Core.Thing…'` (v1 could not
+  deserialize Radarr 6.3's newer response types) is historical — it was the
+  reason the manual Torznab rows were created in the first place.
 - Prowlarr runs `AuthenticationMethod=Forms` + `AuthenticationRequired=Enabled`
   healthily — the DryIoc crash combo was `None`+`Enabled` only (see
   [[radarr]] auth notes).
@@ -105,7 +123,4 @@ prowlarr:
 ## See Also
 
 - [[ARR-Stack]] — full *arr stack documentation
-- [[radarr]]
-- [[sonarr]]
-- [[lidarr]]
-- [[readarr]]
+- [[Radarr]] · [[Sonarr]] · [[Lidarr]] · [[Readarr]] · [[qBittorrent]]