ARCHIVED 2026-05-20 — folded into s8n/beta-flix at services/arr-stack/
This repository has been archived on 2026-05-20. You can view files and clone it, but cannot push or open issues or pull requests.
Find a file
obsidian-ai b129708196 docs: replace trackers stub with extracted onyx qbt tracker inventory
Extracted from qbt search plugins backup at
/home/user/backups/qbt-onyx-migration/qbt-state-20260520.tar.gz.

Key findings:
- 75 plugins / 39 unique announce hosts across 45 active torrents
- All private-tracker plugins have placeholder credentials — user never
  logged into any private tracker. Migration starts clean.
- Public trackers in active use: BitSearch.to, rutor.info, therarbg.to,
  UIndex.org — all Prowlarr-native
- Drop list + custom-indexer needs documented in body
2026-05-20 01:16:29 +01:00
catalog init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00
compose init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00
docs docs: replace trackers stub with extracted onyx qbt tracker inventory 2026-05-20 01:16:29 +01:00
scripts init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00
.gitignore init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00
.gitleaksignore init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00
CLAUDE.md init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00
README.md init: media-acquisition pipeline scaffold 2026-05-20 01:15:43 +01:00

media-acquisition

Self-hosted BitTorrent + arr-stack + canonical-import pipeline that lands torrents directly on nullstone, through a Proton WireGuard VPN with verified kill-switch, hardlinks files into the existing ARRFLIX library, and auto-commits catalog rows to git.s8n.ru/s8n/beta-flix.

Replaces the legacy onyx → rsync → nullstone round-trip.

Architecture

                                    +-----------------+
                                    |  Proton VPN     |
                                    |  (WireGuard)    |
                                    +--------+--------+
                                             | wg0
                                             v
+------------+   indexer queries   +-------------------+   torrent traffic
|  Prowlarr  |-------------------->|     gluetun       |<------------------+
+-----+------+   (via netns)       |  kill-switch fw   |                   |
      |                            +-------------------+                   |
      | search                       ^      ^     ^                        |
      v                              |      |     |                        |
+------------+   grabs    +----------+      |     +----------+             |
|  Sonarr/   |----------->|         qBittorrent (netns=gluetun)            |
|  Radarr    |            |  /home/user/media/_downloads/{incomplete,complete}
+-----+------+            +-------------------------------------------------+
      |                                                                    
      | OnImport webhook (POST /sonarr or /radarr)                          
      v                                                                    
+--------------------+                                                      
| betaflix-catalog   |--+ XFS reflink/hardlink into /home/user/media/{movies,tv}
| (Flask, Python)    |  |
+--------+-----------+  +--> Jellyfin (tv.s8n.ru) picks up new items
         |
         | git commit + push (obsidian-ai)
         v
+-----------------------------+
| git.s8n.ru/s8n/beta-flix    |
| playbooks/import-media/     |
|  MEDIA-LIST.md (updated)    |
|  runs/<slug>.md (new)       |
+-----------------------------+

Single XFS filesystem at /home/user/media → hardlinks / reflinks are free.

Quickstart

# Clone on nullstone
ssh user@nullstone
git clone https://git.s8n.ru/s8n/media-acquisition.git /opt/docker/media-acquisition
cd /opt/docker/media-acquisition/compose

# Configure
cp .env.example .env
${EDITOR:-vi} .env       # fill in PVPN_WG_PRIVKEY, PVPN_WG_ADDRESSES, FORGEJO_PUSH_TOKEN, etc.

# Bring up
docker compose up -d

# Verify VPN kill-switch (CRITICAL — do not skip)
bash ../scripts/killswitch-test.sh

# Sanity: pick a sacrificial legal torrent in qbt UI, confirm it lands in
# /home/user/media/_downloads/complete/ and arr stack hardlinks it.

Layout

README.md                  This file.
CLAUDE.md                  Project rules for Claude Code.
docs/
  architecture.md          The plan in detail. Decision log + reasoning.
  migration.md             onyx-qbt → nullstone-qbt migration runbook.
  trackers.md              Tracker schema + IP-pinning notes (user fills in).
compose/
  docker-compose.yml       Full stack: gluetun + qbt + sonarr + radarr + prowlarr + catalog.
  .env.example             All env vars documented.
  traefik/arr.yml          Traefik file-provider for *.s8n.ru subdomains (LAN+TS only).
catalog/
  catalog.py               Flask webhook receiver → beta-flix catalog updater.
  Dockerfile               python:3.12-slim base.
  requirements.txt         Pinned versions.
  templates/               Jinja2 templates for run logs and catalog rows.
  README.md                Catalog service docs.
scripts/
  migrate-onyx.sh          Phase-2 migration: rsync + .torrent mass-add.
  add-tracker.sh           Helper: add tracker to Prowlarr via API.
  killswitch-test.sh       Verify gluetun blocks traffic when VPN drops.
  • Plan: docs/architecture.md
  • Catalog target: git.s8n.ru/s8n/beta-flix (playbooks/import-media/MEDIA-LIST.md)
  • Jellyfin (consumer): tv.s8n.ru (jellyfin-stock container on nullstone)
  • Host docs: ai-lab/SYSTEM.md

Status

Scaffold. Live deploy pending VPN slot allocation + tracker IP-pinning review. Next step: fill in compose/.env and bring up gluetun + qbt only (no arr yet) to validate kill-switch.