SABnzbd

SABnzbd downloads from Usenet and serves as the backend for the *arr applications.

Secret management

Credentials are stored in Bitwarden. An ExternalSecret pulls the API key and Usenet login into a Kubernetes Secret.

Configuration seeding

An init container uses envsubst to render sabnzbd.ini from a ConfigMap template. The file is copied into the config volume on every start so new settings take effect without manual steps.