Troubleshoot Plundarr¶
Start at the lowest failing layer. A red Radarr health indicator cannot tell you whether Docker failed to mount a path, Gluetun never became healthy, or the download client simply lacks a category.
Generator problems¶
If generation fails, inspect the first error before the summary. Maraudarr may have failed to find a local image, pull the published one, or build a fallback. Do not confuse a registry/Docker-daemon failure with a bad generated Compose model.
Compose problems¶
Common causes:
.envis missing or not besidedocker-compose.yml;- a host port is already in use;
- a path is relative to a different project directory than expected;
- the custom subnet overlaps another route;
- a service references an optional companion that was not selected.
Permission problems¶
Symptoms include permission denied, an app that cannot import downloads, or a
database that repeatedly resets. Compare numeric ownership on the host with the
configured PUID/PGID, then test the exact mounted directory rather than its
parent.
VPN lane never becomes healthy¶
Check in order:
- Privateerr logs show successful configuration generation.
config/gluetun/wireguard/wg0.confexists and is non-empty.privateerr.envcontains the selected endpoint metadata.- Gluetun reads the shared directory and starts with
customWireGuard. - The selected PIA region supports port forwarding when
PIA_PF=true. - The host provides the capabilities/devices required by Gluetun.
The Web UI is unreachable¶
When a download client shares service:gluetun, publish its UI port on
Gluetun. Connecting to the download-client container's nonexistent independent
IP will fail by design.
On Synology, also confirm the DSM firewall allows the host port and, when needed, traffic sourced from the Compose subnet.
Downloads finish but never import¶
- Use the same container path for the shared download root.
- Match categories between Radarr/Sonarr and the download client.
- Confirm the manager can read the completed file and write the final library.
- Check whether cross-filesystem moves prevent hardlinks.
- Do not point Plex or Jellyfin at the incomplete download directory.
Safe reset¶
Back up config/ before changing application state. make down stops the
stack; it should not be treated as permission to remove volumes or configuration
directories. Use destructive cleanup targets only when you intentionally want
a fresh deployment.