docs(arr): fleet consolidated on FrankBook-Pro, VPN egress proven; E2E counts derived from registry

serverAppConfigs-docs/log.md

@@ -11,6 +11,31 @@ timestamp: 2026-09-14
 
 # Bundle Change Log
 
+## 2026-09-04 — *arr fleet consolidated on FrankBook-Pro; all egress VPN-gated
+- Operator decision: **FrankBook-Pro is the sole *arr deployment.** The
+  Dankserver compose copy (booted earlier the same day) was removed;
+  `/opt` config roots trashed on the host; compose/services pruned.
+- All six fleet containers (qB + five arrs) now share gluetun's network
+  namespace — **all egress exits the ProtonVPN tunnel by construction**
+  (AllowedIPs=0.0.0.0/0). The arrs publish no ports of their own; their UI
+  ports (9696/8989/7878/8686/8787) moved onto the gluetun unit. Proven live:
+  residential `71.227.227.172` vs netns-wide `51.179.177.14`.
+- New test seam `tests/frankbook_quadlet.bats`: every arr+qB unit must join
+  gluetun's netns and publish no port; gluetun must publish the whole
+  fleet's port set. deploy-plan.py: gluetun changes carry the whole netns
+  family.
+- arr→qB download clients re-pointed `10.88.0.1:8080` (old bridge-gateway
+  hack, dead inside the tunnel) → `127.0.0.1:8080`; verified by real qB
+  login from inside the netns. Caddy vhosts + homepage probes repoint to
+  192.168.0.112; homepage all green.
+- Defects discovered: Prowlarr's four Application rows are GONE (empty
+  table; sync broken until rebuilt with loopback baseUrls) and readarr's
+  qB proxy auth defect needs a retest post-move. EZTV/1337x CF-block
+  parking may be stale now that egress is VPN — retest before enabling.
+- E2E specs (11-admin/12-crawl) de-hardcoded: expected open-link counts now
+  derive from the live services.json registry. AGENTS.md: deployments are
+  complete only when unit tests AND Playwright E2E both pass.
+
 ## 2026-09-04 — dankserver *arr stack reactivated; rootless identity model documented
 - ARR-Stack: the Dankserver compose deployment (committed 2026-08-29, never
   booted — root-owned `/opt/<svc>/config` dirs crashed every app at logger