- qBittorrent's save path / incomplete-download staging dir (Settings > Downloads) is set manually via its Web UI, not managed in git — the app rewrites its own config on startup, so file-based overrides get silently clobbered.
- Plex needs a one-time claim token to associate a fresh (or
/config-wiped) server with your Plex account — otherwise it starts unclaimed and won't show up as a server in Plex Web. Get a token fromhttps://plex.tv/claim(valid ~4 min) and apply it live:kubectl -n media set env deployment/plex PLEX_CLAIM=<token>. Not stored in git since it's single-use and expires in minutes; remove it again once claimed withkubectl -n media set env deployment/plex PLEX_CLAIM-. - Media apps mount their
/configviahostPathwithtype: Directory, which requires the directory to already exist on the node (/mnt/k3s-data/appdata/<app>, owned1000:1000to match each container'sPUID/PGID) — Kubernetes won't create it. Adding a new app's manifest without first creating its appdata dir leaves the pod stuck inContainerCreatingwith aFailedMountevent.
See DR.md for disaster recovery: bootstrapping dagda from scratch and the couple of secrets that stay outside git.