From e2e76560a2403ec0bdd6b4b0183d463c5aec68bb Mon Sep 17 00:00:00 2001 From: Gmer4Lfe Date: Sun, 2 Aug 2026 00:13:53 -0400 Subject: [PATCH] Fix Authelia config path and stale schedule comments in conf templates MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Authelia config default pointed at /mnt/user/appdata/Authelia, which does not exist — the auth stack lives in the Critical-Data share so it gets synced. Because conf_populate only fills empty fields, that wrong non-empty default blocked auto-detection permanently and left the auth page's rules panel dead. Also corrects three schedule comments that no longer matched varaverk.cron and two references to scripts that have since been renamed or split. --- Deployment/host.conf.template | 2 +- Deployment/master.conf.template | 15 ++++++++------- Plugin/unraid/include/auth.php | 2 +- 3 files changed, 10 insertions(+), 9 deletions(-) diff --git a/Deployment/host.conf.template b/Deployment/host.conf.template index 7eb92cb..c829532 100644 --- a/Deployment/host.conf.template +++ b/Deployment/host.conf.template @@ -570,7 +570,7 @@ HOSTN_LLDAP_PASS="" # lldap admin password # ━━━ Authelia ━━━ - HOSTN_AUTHELIA_CONFIG="/mnt/user/appdata/Authelia/configuration.yml" + HOSTN_AUTHELIA_CONFIG="/mnt/user/appdata-Fallback/Critical-Data/Authelia/configuration.yml" HOSTN_AUTHELIA_CONTAINER="Authelia" # ============================================================================================== diff --git a/Deployment/master.conf.template b/Deployment/master.conf.template index c9d5797..be2f41d 100644 --- a/Deployment/master.conf.template +++ b/Deployment/master.conf.template @@ -424,7 +424,7 @@ # Media shares synced daily by daily_sync_maintenance.sh. # Defined per-host in host*.conf — HOST1_DAILY_SYNC_SHARES and HOST2_DAILY_SYNC_SHARES. # Mesh model: every node pushes every media share. rsync has no --delete so pushes are additive. -# arr_sync (union) ensures all arr libraries converge first. arr_cleanup removes true orphans. +# arr_sync (union) ensures all arr libraries converge first. the arr cleanups remove true orphans. # Any node can download content to any share — it propagates to all nodes on the next cycle. # Adding HOST3: list every media share in HOST3_DAILY_SYNC_SHARES. No ownership to track. # These shares use DEFAULT_RSYNC_OPTS — no profile entry needed. @@ -486,7 +486,7 @@ # monthly_maintenance.sh fires only when BOTH gates pass: # 1. Server uptime >= MONTHLY_UPTIME_THRESHOLD_DAYS days # 2. Last run was >= MONTHLY_RUN_INTERVAL_DAYS days ago (or never run) -# Cron: 0 3 * * * (daily 3am check — script self-gates, calling daily is safe) +# Cron: 0 0 15 * * (15th of the month, midnight — script self-gates, so a spare run is safe) # NOT in WATCHDOG_ORCHESTRATOR_SCRIPTS — has its own cron entry. # Add scripts that require a long-stable settled system — scrubs, extended drive tests. # State file on /boot/config — survives reboots (interval gate independent of uptime gate). @@ -578,10 +578,11 @@ # --partial keep partial file on interrupted transfer so next run resumes, not re-transfers # --timeout kill stalled transfers instead of hanging indefinitely # --numeric-ids use UIDs/GIDs numerically — prevents ownership mismatches between servers -# --delete intentionally omitted — arr_cleanup.sh enforces media truth post-rsync. +# --delete intentionally omitted — the per-arr cleanups (lidarr/sonarr/radarr_cleanup.sh) +# enforce media truth post-rsync. # Media shares use this default; rsync spreads files only, never removes them. # Note: --no-whole-file removed — redundant over SSH (delta transfer is already the default). -# Note: arr_cleanup only catches true orphans under the union model — intentional removals +# Note: the arr cleanups only catch true orphans under the union model — intentional removals # require arr_sync.sh --blocklist-add first, then manual file deletion. DEFAULT_RSYNC_OPTS=(-av --info=progress2 --human-readable --bwlimit="$BW_LIMIT" --inplace --partial --timeout=60 --numeric-ids) @@ -1075,7 +1076,7 @@ LIDARR_IMPORT_SCAN_TIMEOUT=600 # seconds to wait for pre-flight import scan # Lidarr tracked-data cache — shared by lidarr_cleanup.sh, lidarr_duplicate_artist_cleanup.sh, -# lidarr_missing_art.sh, lidarr_release_fixer.sh, and lidarr_cache_prefill.sh. See +# lidarr_missing_art.sh, lidarr_release_fixer.sh, and arr_cache_prefill.sh. See # lidarr_get_tracked_data() in common.sh for the fresh/stale/rescan-active branching logic. LIDARR_CACHE_FILE="$DATA_DIR/lidarr_tracked_cache.json" LIDARR_RESCAN_DURATION_DB="$DATA_DIR/lidarr_rescan_duration.db" @@ -1261,7 +1262,7 @@ # ━━━ Arr Failed/Stalled Recovery ━━━ # Auto blocklist + re-search failed imports and stalled downloads. -# Runs every 6 hours — schedule: 0 */6 * * * +# Runs every 4 hours via INTERMEDIATE_MAINTENANCE_SCRIPTS — no cron entry of its own. # # Targets five problem types: # importFailed — downloaded but arr couldn't import @@ -1490,7 +1491,7 @@ # ── SYSTEM WATCHDOG ─────────────────────────────────────────────────────────────────────────── # ============================================================================================== # Single-pass system health check — last line of defense before a crash. -# Called by watchdog_orchestrator.sh every minute. NOT started by array_started.sh. +# Called by watchdog_orchestrator.sh every 15 minutes. NOT started by array_started.sh. # Re-sources config at each orchestrator run — config changes take effect immediately. # # ── THREE-TIER RESPONSE SYSTEM ──────────────────────────────────────────────────────────────── diff --git a/Plugin/unraid/include/auth.php b/Plugin/unraid/include/auth.php index 5f7b1ca..8342851 100644 --- a/Plugin/unraid/include/auth.php +++ b/Plugin/unraid/include/auth.php @@ -7,7 +7,7 @@ function vv_auth_conf(): array { $v = vv_conf_vars(); $host = strtoupper(vv_detect_host()); return [ - 'npm_url' => rtrim($v["{$host}_NPM_URL"] ?? 'http://localhost:81', '/'), + 'npm_url' => rtrim($v["{$host}_NPM_URL"] ?? 'http://localhost:7818', '/'), 'npm_user' => $v["{$host}_NPM_USER"] ?? '', 'npm_pass' => $v["{$host}_NPM_PASS"] ?? '', 'lldap_url' => rtrim($v["{$host}_LLDAP_URL"] ?? 'http://localhost:17170', '/'),