Bro, I'm not asking it to show me how to pleasure my GF... This took fking hours. Literally 9 hours. so many missed critical details **100TB GDrive Backend** # I. Firmware & OS Hardening (Headless Optimization) * **UEFI/BIOS Configuration**: * Set `AC Recovery` to `Power On`. * Set `POST Behavior` to `Continue on Warnings and Errors`. * Disable `SupportAssist OS Recovery` and `BIOSConnect` (UEFI Network Stack dependency). * Clear `BIOS Event Logs` to reset pending diagnostic flags. * **OS Level (Windows 11)**: * Disable `Fast Startup` via Power Options (Registry: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power\HiberbootEnabled = 0`). * Set Power Schema to `High Performance`; disable `PCI Express Link State Power Management`. * Configure `Automatic Login` via `netplwiz` for persistent session restoration after power cycling. # II. Storage Abstraction Layer (Rclone VFS) * **API Ingress**: * Provision a dedicated **OAuth 2.0 Client ID and Secret** via Google Cloud Console. * Enable `Drive API` and bypass default `rclone` shared client IDs to eliminate 403 Rate Limit errors. * **VFS Mount Parameters**: * **Mount Command**: $$rclone \\ mount \\ remote: \\ G: \\ --vfs-cache-mode \\ full \\ --vfs-cache-max-age \\ 24h \\ --buffer-size \\ 256M \\ --dir-cache-time \\ 1000h \\ --attr-timeout \\ 1000h$$ * **Logic**: Map `G:` as a virtual filesystem with `--vfs-read-chunk-size 128M` for sequential 4K stream buffering. * **Persistence**: * Implement a `.vbs` wrapper in `shell:startup` to execute the mount in a suppressed background process (WindowStyle 0). # III. Containerization & Orchestration (Docker) * **Engine**: Docker Desktop (WSL2 Backend). * **Stack (Docker-Compose YAML)**: * **Plex**: Enable `/dev/dri` passthrough for **Intel QuickSync (iGPU)** hardware transcoding. * **Automation (Radarr/Sonarr)**: Configure binary path mapping (`/data/media`) to ensure **Atomic Moves** (Instant Imports) across the VFS mount. * **Indexer Logic (Prowlarr)**: Centralize API keys for all Usenet/Torrent indexers. * **Database Management**: Force all SQLite databases (`AppDir`) to the local **NVMe SSD** to prevent latency-induced database locks frequent in cloud-based storage. # IV. Network Ingress & Automation * **External Access**: Deploy `cloudflared` (Cloudflare Tunnel) to route **Overseerr** (Request Management) through a secure HTTPS tunnel, bypassing CGNAT and local firewall port-forwarding. * **Library Scanning**: Disable Plex 'Auto-Scan' on the VFS mount; implement a **Websocket-based Plex Autoscan** script to trigger targeted library updates via filesystem change notifications.

---