FigJam Diagram: Prowlarr — Indexer Manager (expires 2026-04-13)
Prowlarr is the central indexer proxy in the media stack. It manages torrent indexer credentials (TorrentLeech, etc.) and automatically syncs them to Radarr and Sonarr — eliminating per-app indexer configuration.
medialinuxserver/prowlarr:1.28.2| Resource | Kind | Details |
|---|---|---|
prowlarr-config |
PVC (Longhorn) | 1Gi — indexer config, DB, logs |
prowlarr |
Deployment | 1 replica, Recreate strategy |
prowlarr |
Service | :9696 (http), :9707 (metrics) |
prowlarr |
IngressRoute | Traefik, Authentik forwardAuth |
prowlarr-tls |
Certificate | Let's Encrypt, prowlarr.k3s.strommen.systems |
prowlarr-exportarr |
ServiceMonitor | 60s scrape interval |
| Setting | Value |
|---|---|
| Image | linuxserver/prowlarr:1.28.2 |
| PUID | 10015 (svc-prowlarr on NAS) |
| PGID | 10000 (media-services group) |
| TZ | America/Chicago |
| CPU request/limit | 100m / 1 |
| Memory request/limit | 128Mi / 512Mi |
Prowlarr needs no NFS mount — it only stores indexer config and credentials locally.
| Setting | Value |
|---|---|
| Image | ghcr.io/onedr0p/exportarr:v2.3.0 |
| Mode | prowlarr |
| Port | 9707 |
| Backfill | enabled (PROWLARR__BACKFILL=true) |
| CPU request/limit | 5m / 100m |
| Memory request/limit | 32Mi / 64Mi |
prowlarr.k3s.strommen.systems via Traefik IngressRoute in media namespaceauthentik-forward-auth from public-ingress namespace (Authentik SSO)prowlarr-tls Certificate (Let's Encrypt DNS-01 via Route53)Prowlarr is configured to route indexer search traffic through the gluetun HTTP proxy exposed by qBittorrent:
qbittorrent-proxy.media.svc.cluster.local:8888This is configured inside Prowlarr's indexer settings (Settings → Indexers → Proxy) and is not managed in the manifest.
/metrics on port 9707prowlarr-exportarr — label release: kube-prometheus-stack, 60s interval, backfill enabledmonitoring namespace with label grafana_dashboard: "1"| Service | Role |
|---|---|
| Radarr | Consumes indexers synced from Prowlarr |
| Sonarr | Consumes indexers synced from Prowlarr |
| qBittorrent | HTTP proxy (:8888) used by Prowlarr for seedbox-IP searches |
kubernetes/apps/media/prowlarr.yaml