docs: add full homelab documentation structure

docs/troubleshooting/KNOWN_QUIRKS.md

@@ -0,0 +1,69 @@
+# Known Quirks
+
+Per-service gotchas that aren't bugs but will bite you if you forget them.
+
+## PlausibleDeniability
+
+### immich-ml
+- Healthcheck has no curl/wget — uses `/proc/net/tcp6` pattern
+- Cache goes to `/mnt/docker-ssd/docker/appdata/immich-ml` (separate from immich-server's appdata)
+
+### rackpeek
+- No curl/wget in image — healthcheck uses `/proc/net/tcp6`
+
+### donetick
+- Env vars alone are insufficient for DB type selection
+- Requires `/mnt/tank/docker/appdata/donetick/config/selfhosted.yaml` with full DB config
+- Uses viper config loader — `DT_ENV` controls config file path
+
+### shlink
+- Data directory must be `chmod 777` — runs as non-root user that doesn't match host default ownership
+
+### openwebui
+- DB: user=`openwebui`, db=`openwebui` on shared-postgres
+- If restart-looping with auth errors: container wasn't on `ix-databases_shared-databases` at creation time — must `down && up`
+
+### plex
+- Port `5353/udp` conflicts with system avahi/mDNS — remove from port mappings
+
+### scriberr (shelved)
+- SQLite incompatible with ZFS nfsv4 ACLs (SQLITE_CANTOPEN error 14)
+- Revisit when Postgres support available in CUDA image
+
+### meshmonitor (auto-upgrade)
+- `AUTO_UPGRADE_ENABLED=true` causes crashes on TrueNAS if bind mount source directories don't exist
+- The upgrader container mounts compose dir as `/compose` — relative paths resolve differently
+- Fix: pre-create all bind mount source directories before deploying
+
+### Any container using `down && up` requirement
+- Network attachments happen at container creation, not restart
+- `docker restart` or `docker compose restart` will NOT fix missing network attachments
+- Must use `docker compose --env-file .env down <service> && docker compose --env-file .env up -d <service>`
+
+---
+
+## Serenity
+
+### qBit Mover Script
+- Pauses torrents 0–4 days old before running mover to prevent partial file moves
+- MAM-init script updates MyAnonamouse IP inside qbit container on startup
+
+### Unraid-Cloudflared-Tunnel
+- Dead container, should be removed
+
+---
+
+## N.O.M.A.D.
+
+### NVIDIA Container Toolkit
+- Repo has invalid GPG key — remove `/etc/apt/sources.list.d/*nvidia*` if apt errors
+
+### Pelican / Wings
+- Interactive artisan commands break over SSH (stty issue) — always use inline flags:
+  `--email=x --username=y --password=z --admin=1`
+- Wings CORS derived from `remote:` URL, not `allowed_origins` — keep remote as `https://`
+- `panel.paccoco.com` in `/etc/hosts` → `127.0.0.1` for NAT loopback
+- Wings uses `--ignore-certificate-errors` for local self-signed cert
+
+### Port 8080
+- Occupied by `nomad_admin` container — Wings uses 8443 instead