Frank
4c7465d00d
FrankBook-Pro becomes the only *arr/qBittorrent deployment. Every fleet container (qB + five arrs) now shares gluetun's netns, so all egress — torrent, indexer APIs, metadata lookups — exits the WireGuard tunnel by construction (AllowedIPs=0.0.0.0/0); the arrs' own ports publish on the gluetun unit, none on the arr units themselves. - dankserver/compose.yaml: remove the six arr services (the Aug 20 compose copy — never healthy, superseded; config dirs trashed on the host) - dankclaw/Caddyfile + shared/homepage/services.json: arr vhosts and probes repoint 192.168.0.235 -> 192.168.0.112 (FrankBook-Pro) - frankbook-pro units: five arrs join gluetun netns (Wants/After/Network); gluetun publishes 9696/8989/7878/8686/8787 alongside 8080/6881 - tests/frankbook_quadlet.bats: new VPN egress seam — every arr+qB unit must share gluetun's netns and publish no port; gluetun must publish the whole fleet's ports - deploy-plan.py: gluetun changes carry the whole netns family (a gluetun recreation kills all six joiners); dankserver compose set loses the arrs - AGENTS.md: deployment is complete only when unit tests AND the Playwright E2E suite both pass
23 lines
478 B
Bash
23 lines
478 B
Bash
# Dankserver stack secrets and configuration.
|
|
# Copy to .env and fill real values. Never commit real secrets.
|
|
|
|
# RomM admin credentials (first boot)
|
|
ROMM_USERNAME=changeme
|
|
ROMM_PASSWORD=changeme
|
|
ROMM_AUTH_SECRET_KEY=changeme
|
|
|
|
# RomM database (MariaDB)
|
|
ROMM_DB_USER=romm
|
|
ROMM_DB_PASSWD=changeme
|
|
MARIADB_ROOT_PASSWORD=changeme
|
|
|
|
# RomM Redis
|
|
# (no password needed for local Redis)
|
|
|
|
# Copyparty
|
|
COPAY_PASS=changeme
|
|
|
|
# Jellyfin
|
|
JELLYFIN_PUBLISH_SERVER_URL=http://192.168.0.235:8096
|
|
|