# Dankserver Stack

Dankserver (192.168.0.235) runs the media and library stack. Public access
goes through the Caddy reverse proxy on Dankclaw; the *arr stack is exempt by
construction — it has no vhost and is reached directly by IP:port on the LAN.

```mermaid
graph LR
    U[User] --> C[Caddy :80/:443 on Dankclaw]
    C -->|guarded: Anubis + Authentik| R[RomM :8085]
    C -->|guarded| P[Copyparty :3923]
    C -->|unguarded| W[Calibre-Web :8083]
    C -->|unguarded| J[Jellyfin :8096]
    C -->|exempt by construction| X[Plex :32400]
    U -->|direct IP:port, no vhost| S[ARR stack + Prowlarr + qBittorrent on FrankBook-Pro]
```

## Services

| Service | Public route | Port | Docs |
|---------|--------------|------|------|
| RomM | `romm.franksdank.cloud` (guarded: Anubis → Authentik; post-auth route → 192.168.0.235:8085) | 8085 | [[RomM]] |
| Copyparty | `files.franksdank.cloud` (guarded; post-auth route → 192.168.0.235:3923) | 3923 | [[Copyparty]] |
| Calibre-Web | `books.franksdank.cloud` (unguarded — own login) | 8083 | [[Calibre-Web]] |
| Jellyfin | `jelly.franksdank.cloud` (unguarded — own auth) | 8096 | [[Jellyfin]] |
| Plex | `plex.franksdank.cloud` (+ legacy plain-HTTP `plex.franksdank.casa`) | 32400 | [[Plex]] |

The *arr stack (Sonarr 8989, Radarr 7878, Lidarr 8686, Readarr 8787,
Prowlarr 9696) and qBittorrent (8080, behind the [[Gluetun]] tunnel netns)
run on **FrankBook-Pro**, not on this host — see [[ARR-Stack]]; none of them
have a Caddy vhost.

## Never-deployed services

Jackett and Whisparr were evaluated during the ARR-stack design phase and
never deployed (no unit, no vhost, no live container). Prowlarr covers the
indexer-aggregation role — see [[Prowlarr]].

## Removed Services

The following services ran on Dankserver and are now retired from this stack:

- OpenWebUI — moved to Dankclaw (see [[OpenWebUI]])
- llama-swap — retired; no replacement
- SearXNG — moved to Dankclaw (see [[SearXNG]])

## See Also

- [[index]] — repository index
- [[Network Architecture]] — routing and proxy