fix: address review blockers and doc duplicates

Author: liamvibecodes

README.md

@@ -189,7 +189,6 @@ bash scripts/vpn-mode.sh nord
 | `scripts/setup.sh` | Creates folders, generates .env, copies config templates |
 | `scripts/doctor.sh` | Runs preflight checks (runtime, env, compose, ports) |
 | `scripts/upgrade-from-basic.sh` | One-shot migration from basic stack to advanced |
-| `scripts/doctor.sh` | Runs preflight checks (runtime, env, compose, ports) |
 | `scripts/configure.sh` | Auto-configures all service connections via API |
 | `scripts/health-check.sh` | Full stack health diagnostic |
 | `scripts/install-launchd-jobs.sh` | Installs all automation as background jobs |

SETUP.md

@@ -226,7 +226,6 @@ This installs:
 - Log prune (daily cleanup, removes logs older than 30 days)
 - Download watchdog (stalled torrent auto-fix every 15 min)
 - Kometa scheduler (metadata refresh every 4 hours)
-- Log prune (daily log cleanup with 30-day retention)
 
 Automation logs go to `<MEDIA_DIR>/logs/` and launchd stdout/stderr logs go to `<MEDIA_DIR>/logs/launchd/` (default `~/Media/...`).
 

scripts/download-watchdog.py

@@ -39,14 +39,12 @@ def load_media_dir() -> Path:
 LOG_FILE = BASE_DIR / "logs" / "download-watchdog.log"
 RADARR_CFG = BASE_DIR / "config" / "radarr" / "config.xml"
 SONARR_CFG = BASE_DIR / "config" / "sonarr" / "config.xml"
+CREDENTIALS_FILE = BASE_DIR / "state" / "first-run-credentials.txt"
 
 RADARR_URL = os.getenv("RADARR_URL", "http://localhost:7878")
 SONARR_URL = os.getenv("SONARR_URL", "http://localhost:8989")
 QBIT_URL = os.getenv("QBIT_URL", "http://localhost:8080")
 
-QBIT_USERNAME = os.getenv("QBIT_USERNAME", "admin")
-QBIT_PASSWORD = os.getenv("QBIT_PASSWORD", "")
-
 STALL_SECONDS = int(os.getenv("WATCHDOG_STALL_SECONDS", "1800"))
 SLOW_SECONDS = int(os.getenv("WATCHDOG_SLOW_SECONDS", "1200"))
 MIN_SPEED_BPS = int(os.getenv("WATCHDOG_MIN_SPEED_BPS", str(300 * 1024)))
@@ -77,6 +75,26 @@ def parse_api_key_xml(path):
     return text[start + 8 : end].strip()
 
 
+def load_qbit_credentials():
+    username = os.getenv("QBIT_USERNAME", "").strip()
+    password = os.getenv("QBIT_PASSWORD", "").strip()
+
+    if username and password:
+        return username, password
+
+    if CREDENTIALS_FILE.exists():
+        try:
+            for line in CREDENTIALS_FILE.read_text(errors="ignore").splitlines():
+                if line.startswith("qBittorrent Username:") and not username:
+                    username = line.split(":", 1)[1].strip()
+                elif line.startswith("qBittorrent Password:") and not password:
+                    password = line.split(":", 1)[1].strip()
+        except Exception:
+            pass
+
+    return (username or "admin"), password
+
+
 def http_json(url, headers=None, timeout=30):
     req = urllib.request.Request(url, headers=headers or {})
     with urllib.request.urlopen(req, timeout=timeout) as resp:
@@ -168,8 +186,14 @@ def main():
         log("[ERROR] No API keys found")
         return 1
 
+    qbit_username, qbit_password = load_qbit_credentials()
+    globals()["QBIT_USERNAME"] = qbit_username
+    globals()["QBIT_PASSWORD"] = qbit_password
+
     if not QBIT_PASSWORD:
-        log("[ERROR] QBIT_PASSWORD is not set. Check your environment or credentials file.")
+        log(
+            f"[ERROR] QBIT_PASSWORD is not set and no credentials found in {CREDENTIALS_FILE}"
+        )
         return 1
 
     try: