add qBittorrent page

qBittorrent.md

@@ -0,0 +1,74 @@
+# qBittorrent
+
+BitTorrent client with web UI.
+
+- **URL**: `https://tor.alogins.net`
+- **Local**: `http://localhost:8085`
+- **Image**: `lscr.io/linuxserver/qbittorrent:latest`
+- **Config**: `~/agap_git/qbittorrent/`
+- **Data**: `/mnt/misc/qbittorrent/` (temporary location)
+  - `config/` — qBittorrent settings
+  - `downloads/` — downloaded files
+
+## Ports
+
+| Port | Purpose |
+|------|---------|
+| 8085 | WebUI (TCP) |
+| 6881 | BitTorrent peer port (TCP + UDP) |
+
+## Setup
+
+```bash
+cd ~/agap_git/qbittorrent
+docker compose up -d
+```
+
+## docker-compose.yml
+
+```yaml
+services:
+  qbittorrent:
+    image: lscr.io/linuxserver/qbittorrent:latest
+    container_name: qbittorrent
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Moscow
+      - WEBUI_PORT=8085
+    volumes:
+      - /mnt/misc/qbittorrent/config:/config
+      - /mnt/misc/qbittorrent/downloads:/downloads
+    ports:
+      - "8085:8085"
+      - "6881:6881"
+      - "6881:6881/udp"
+    restart: unless-stopped
+```
+
+## Credentials
+
+- **Username**: `admin`
+- **Password**: stored in Vaultwarden as `QBITTORRENT_ADMIN`
+
+On first start, container logs print a temporary admin password. Replaced on initial setup; permanent password lives in Vaultwarden.
+
+## Reverse proxy / host header
+
+qBittorrent rejects requests when the `Host` header doesn't match `localhost`. To work behind Caddy, the following preferences are set (already applied):
+
+- `web_ui_host_header_validation_enabled: false`
+- `web_ui_reverse_proxy_enabled: true`
+- `web_ui_reverse_proxies_list: 127.0.0.1/32,172.16.0.0/12`
+
+Caddy entry:
+
+```
+tor.alogins.net {
+    reverse_proxy localhost:8085
+}
+```
+
+## Storage Note
+
+Downloads currently land in `/mnt/misc/qbittorrent/downloads`. `/mnt/misc` is a temporary location — move to a dedicated media volume when capacity planning is settled.