MetaPlugin/MetaFeeder/MetaTransport apps: headless services (no AppShield, no Caddy route, no webui); drop parent; MetaFeederUsenet tile → nntmux

Apps/MetaFeederProwlarr/docker-compose.yml

@@ -32,8 +32,8 @@ services:
   # ---------------------------------------------------------------------------
   # metafeederprowlarr-feeder — the feeder (meta-feeder-torznab) running the
   # Prowlarr/Torznab source. The gateway reaches it directly on `pcs` for
-  # discovery/query/compute; the human configures it through the AppShield gate
-  # below.
+  # discovery/query/compute; the human configures it
+  # from the MetaGateway dashboard (configure panel).
   # ---------------------------------------------------------------------------
   metafeederprowlarr-feeder:
     # Image name is `meta-feeder-torznab` — the repo (and therefore the ghcr
@@ -56,8 +56,8 @@ services:
     environment:
       # INFRA-ONLY env (the "config: no env if in webui" rule). Operator config —
       # Prowlarr indexers + API key, TMDB token / language, meta-core URL — is
-      # read from the persisted config.json (this feeder's config page behind the
-      # AppShield gate); env is only a deprecated first-boot seed. These env vars
+      # read from the persisted config.json (this feeder's config page, opened from
+      # the MetaGateway dashboard (configure panel)); env is only a deprecated first-boot seed. These env vars
       # are wiring only: the enrichment sidecars, the enrich callback, the peer id
       # and Prowlarr paging. meta-core defaults to the pcs
       # `http://metacore-app:9000`; Prowlarr is reached as `prowlarr:9696`.
@@ -144,43 +144,6 @@ services:
     networks:
       - metafeederprowlarr
       - pcs
-
-  # ---------------------------------------------------------------------------
-  # AppShield gate — the feeder's config UI (set the Prowlarr key, TMDB token)
-  # behind Yundera OIDC SSO. container_name == subdomain prefix. The gateway
-  # still reaches the feeder directly on `pcs` (this gate is for the human only);
-  # index → /config.
-  # ---------------------------------------------------------------------------
-  metafeederprowlarr:
-    image: ghcr.io/yundera/appshield:2.0.9
-    cpu_shares: 80
-    container_name: metafeederprowlarr
-    hostname: metafeederprowlarr
-    restart: unless-stopped
-    user: "0:0"
-    expose:
-      - 80
-    environment:
-      OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
-      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.nip.io,${APP_PUBLIC_IP_DASH}.sslip.io"
-      BACKEND_HOST: "metafeederprowlarr-feeder"
-      BACKEND_PORT: "8080"
-      LISTEN_PORT: "80"
-    labels:
-      caddy_0: metafeederprowlarr-${APP_DOMAIN}
-      caddy_0.import: gateway_tls
-      caddy_0.reverse_proxy: "{{upstreams 80}}"
-      caddy_1: metafeederprowlarr-${APP_PUBLIC_IP_DASH}.nip.io
-      caddy_1.import: gateway_tls
-      caddy_1.reverse_proxy: "{{upstreams 80}}"
-      caddy_2: metafeederprowlarr-${APP_PUBLIC_IP_DASH}.sslip.io
-      caddy_2.reverse_proxy: "{{upstreams 80}}"
-    depends_on:
-      - metafeederprowlarr-feeder
-    networks:
-      - metafeederprowlarr
-      - pcs
-
 networks:
   metafeederprowlarr:
     name: metafeederprowlarr
@@ -196,9 +159,6 @@ x-casaos:
   author: Worph Team
   category: Media
   developer: Aptero Team
-  main: metafeederprowlarr
-  webui_port: 80
-  index: /config
 
   description:
     en_us: |
@@ -265,14 +225,14 @@ x-casaos:
         1. In **Prowlarr**: complete its first-run wizard, add one or more
            indexers (torrent or usenet), then copy the **API Key**
            (Settings → General).
-        2. Open this app's config UI (the dashboard link). Paste the Prowlarr key
+        2. Open its config panel (the **MetaGateway** dashboard → this feeder → *configure*). Paste the Prowlarr key
            into the indexer's API-key field; optionally set a TMDB v4 token for
            posters. Save — the feeder reloads automatically.
         3. In **MetaGateway**, make sure this feeder is listed in its feeders
            config (`http://metafeederprowlarr-feeder:8080`) so it gets
            discovered.
 
-        **Authentication:** the config UI is protected by Yundera's Authelia (OIDC).
+        **No web UI of its own:** configure it from the **MetaGateway** dashboard → this feeder → *configure* (the gateway proxies this feeder's config page, behind the gateway's login).
 
 # Maison (Yundera dashboard) configuration. Read in preference to x-casaos.
 # schema_version 2 is required for `folders`: an older Maison refuses the app
@@ -289,6 +249,3 @@ x-compose-app:
     - path: /DATA/AppData/metafeederprowlarr/tmdb-cache
       user: $PUID
       group: $PGID
-  # Same string as the caddy_0 label, so the tile link and the route agree.
-  webui-host: metafeederprowlarr-${domain}
-  webui-path: "/config"