update seanime docs: qBittorrent config, extensions, container doc, arriman note

containers/133-seanime.md

@@ -0,0 +1,61 @@
+# seanime (LXC 133) — Seanime anime media server
+
+## Summary
+
+| Field | Value |
+|-------|-------|
+| VMID | 133 |
+| Host | strong |
+| Role | Anime media server (online streaming + torrent client) |
+| LAN IP | 192.168.8.248/28 (vmbr1) |
+| Public URL | https://seanime.hubris.network |
+| Backend | Seanime v3.9.0, systemd service |
+| Port | 43211 |
+
+## Mounts
+
+- `/anime` → `/mnt/media_local/anime` (ludo-lvm, bind mount) — existing anime collection
+
+## Services
+
+### Seanime (native binary)
+
+- Binary: `/opt/seanime/bin/seanime`
+- Data: `/opt/seanime/data/`
+- Config: `/opt/seanime/data/config.toml`
+- Service: `systemctl status seanime`
+- Flags: `--host 0.0.0.0 --port 43211 --datadir /opt/seanime/data --disable-password`
+- Config highlights:
+  - `secureMode = 'lax'` (allows non-local Caddy proxy)
+  - `trustedProxies = ['192.168.8.0/24']`
+
+### Torrent client (qBittorrent on arriman)
+
+- Host: `192.168.8.245:8080`
+- Auth: subnet whitelist (no password needed from homelab LAN)
+- qBittorrent config updated: `AuthSubnetWhitelist=192.168.8.0/24`
+
+### Extensions installed
+
+**Online streaming (8):**
+HiAnime, AniWatch, KickAssAnime, Anicrush, Animo, AniNeko, Senshi, Sudatchi
+
+## Caddy
+
+- Config: `seanime.hubris.network` block in `/etc/caddy/Caddyfile` (dtoro/caddy-conf repo)
+- TLS: Let's Encrypt DNS-01 via IONOS API
+- Backend: `192.168.8.248:43211`
+
+## DNS
+
+- `seanime.hubris.network` A record → `192.168.8.175` (Caddy)
+
+## Changelog
+
+### 2026-07-05 — initial creation
+- LXC 133 created on strong (Debian 13, 2 cores / 2 GiB)
+- Seanime v3.9.0 installed as native binary + systemd service
+- /anime bind mount from ludo-lvm
+- qBittorrent on arriman configured as torrent client
+- Caddy reverse proxy + DNS records set up
+- Online streaming extensions installed

hosts/arriman.yaml

@@ -31,6 +31,7 @@ services_hosted:
 notes:
 - Migrated from hubris to strong 2026-07-05 (Phase 2). Library on ludo-lvm.
 - Contains homarr, radarr, sonarr, lidarr, sabnzbd, qbittorrent, bazarr, flaresolverr, prowlarr, jellyseerr
+- qBittorrent auth subnet whitelist expanded to 192.168.8.0/24 (for seanime + Caddy access)
 see_also:
 - containers/122-arriman.md
 mcp_endpoint: https://mcp.hubris.network/mcp

hosts/romm.yaml

@@ -0,0 +1,27 @@
+# Generated by mcp/build_host_files.py from inventory.yaml.
+# Do NOT edit by hand — your changes will be overwritten.
+# Source of truth: ../inventory.yaml
+name: romm
+kind: lxc
+os: linux
+role: rom-manager
+host: strong
+pve_id: 134
+lan_ip: 192.168.8.249
+mesh_globals:
+  primary: netbird
+  accepted:
+  - netbird
+  - tailscale
+mounts:
+- /mnt/media_local
+public_host: roms.hubris.network
+notes:
+- Docker host for RomM (romm.app) self-hosted ROM manager. Created 2026-07-05.
+- MariaDB sidecar at /opt/romm/docker-compose.yml.
+- ROMs on ludo-lvm media volume at /mnt/media_local/roms.
+- 1 core / 2 GiB RAM / 16 GiB rootfs (ludo-lvm).
+see_also:
+- containers/134-romm.md
+mcp_endpoint: https://mcp.hubris.network/mcp
+secrets_issuance_endpoint: https://secrets.hubris.network/issue

hosts/seanime.yaml

@@ -19,5 +19,12 @@ public_host: seanime.hubris.network
 notes:
 - Seanime anime media server for online streaming + local library scanning
 - Created 2026-07-05. Binary at /opt/seanime/bin/seanime, systemd service.
+- Connected to qBittorrent on arriman (192.168.8.245:8080)
+- 8 online streaming extensions installed (HiAnime, AniWatch, KickAssAnime, etc.)
+- /anime mounted from strong ludo-lvm (/mnt/media_local/anime)
+- Caddy: "https://seanime.hubris.network \u2192 192.168.8.248:43211"
+- qBittorrent auth subnet whitelist expanded to 192.168.8.0/24 for seanime access
+see_also:
+- containers/133-seanime.md
 mcp_endpoint: https://mcp.hubris.network/mcp
 secrets_issuance_endpoint: https://secrets.hubris.network/issue

inventory.yaml

@@ -325,6 +325,7 @@ hosts:
     notes:
     - Migrated from hubris to strong 2026-07-05 (Phase 2). Library on ludo-lvm.
     - Contains homarr, radarr, sonarr, lidarr, sabnzbd, qbittorrent, bazarr, flaresolverr, prowlarr, jellyseerr
+    - qBittorrent auth subnet whitelist expanded to 192.168.8.0/24 (for seanime + Caddy access)
     age_pubkey: ''
   grimmory:
     kind: lxc
@@ -353,6 +354,11 @@ hosts:
     notes:
     - Seanime anime media server for online streaming + local library scanning
     - Created 2026-07-05. Binary at /opt/seanime/bin/seanime, systemd service.
+    - Connected to qBittorrent on arriman (192.168.8.245:8080)
+    - 8 online streaming extensions installed (HiAnime, AniWatch, KickAssAnime, etc.)
+    - /anime mounted from strong ludo-lvm (/mnt/media_local/anime)
+    - Caddy: https://seanime.hubris.network → 192.168.8.248:43211
+    - qBittorrent auth subnet whitelist expanded to 192.168.8.0/24 for seanime access
   romm:
     kind: lxc
     pve_id: 134