From 2c67b9729b58374a74f6d1f0d7a60a06407f8df8 Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Thu, 16 Apr 2026 17:45:19 -0400
Subject: [PATCH] arr-init: fix prowlarr health check failure

Disable health checks on Prowlarr -- the synced-app testall endpoint
requires Sonarr/Radarr to reverse-connect to prowlarrUrl, which is
unreachable across the wg namespace boundary.

Also add networkNamespaceService = "wg" for the new configurable
namespace service dependency (replaces old hardcoded wg.service).
---
 services/arr/init.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/services/arr/init.nix b/services/arr/init.nix
index 63f8dd3..5f72c0d 100644
--- a/services/arr/init.nix
+++ b/services/arr/init.nix
@@ -8,7 +8,10 @@
       dataDir = service_configs.prowlarr.dataDir;
       apiVersion = "v1";
       networkNamespacePath = "/run/netns/wg";
-      healthChecks = true;
+      networkNamespaceService = "wg";
+      # Synced-app health checks require Sonarr/Radarr to reverse-connect to
+      # prowlarrUrl, which is unreachable across the wg namespace boundary.
+      healthChecks = false;
       syncedApps = [
         {
           name = "Sonarr";