The arr stack (prowlarr, radarr, sonarr, lidarr, readarr, qbittorrent) had A records in addn-hosts but no Caddyfile blocks. This adds: - Six public vhost blocks in the dankserver section, each proxying to 192.168.0.235:<port> (exempt by construction: own auth, no Anubis) - Six @arr named handlers inside :8017 for authenticated traffic routing All 233 bats tests pass.