Skip to content

chore(release): v1.2.0 - #100

Merged
florianjs merged 1 commit into
mainfrom
release/v1.2.0
Nov 9, 2026
Merged

florianjs merged 1 commit into
mainfrom
release/v1.2.0

Conversation

@florianjs

Copy link
Copy Markdown
Owner

Trackarr 1.2.0: sign-up can be paid in Bitcoin, Monero or Solana, and an upload assistant builds the torrent, MediaInfo, screenshots and description for you, in the browser or from a terminal.

No breaking changes: no new required variable. Update as usual (git pull then docker compose -f docker-compose.prod.yml up -d --build); schema changes are applied at startup. To accept Monero, re-run scripts/install.sh and answer yes to the Monero question.

💰 Paid registration

Admin → Payments: charge a fixed sign-up fee, verified on-chain, self-hosted (#98).

  • Bitcoin: one address per invoice derived from your zpub/xpub (BIP84), checked through Esplora (mempool.space by default or your own).
  • Monero: one subaddress per invoice from a view-only wallet. The installer runs the wallet service (monero compose profile) and the wallet is created from the admin page with your primary address and private view key.
  • Solana: your address plus a Solana Pay reference per invoice.
  • No spend key on the server; payments made before an invoice are ignored.
  • New accounts stay locked (API 402, no RSS/Torznab) until paid, then unlock automatically. Unpaid accounts are deleted after a delay and give their invite back; accounts with money on the way are kept and can be unlocked by hand.
  • Admin choice: invited members pay too, or an invite skips the payment.

🧙 Upload assistant

Home → Upload assistant, or the trackarr-upload.mjs CLI (#99). One file or folder in, a published torrent out:

  • Private .torrent with the uploader's announce URL and a source tag; the tracker keeps the same info hash, so the uploader seeds the file just created.
  • MediaInfo of the main video (local path removed), summarized and in full in a spoiler.
  • Screenshots spread over the video and hosted on Pixhost, with an adult content flag. In the browser: native decoder, ffmpeg.wasm for what it cannot play (HEVC, AVI...).
  • BBCode description in one of 8 languages: tracks, release details, screenshots, file list. Editable, previewed, copyable for other sites.
  • CLI served by the tracker at /tools/trackarr-upload.mjs (Node 20+, ffmpeg, mediainfo), publishing with the Integrations API key.

📝 Descriptions

  • Torrent descriptions now render BBCode as well as Markdown (escaped, whitelisted tags, http(s) links and images only).
  • Description limit raised from 10,000 to 50,000 characters (room for a full MediaInfo report).

🔐 Security notes

  • The Integrations API key can now publish torrents (CLI). A leaked key already revealed the passkey through Torznab downloads: regenerate the key and reset the passkey, both on the Integrations page.
  • Content Security Policy: 'wasm-unsafe-eval' (WebAssembly only, no JavaScript eval) and blob: for media and images, for the upload assistant.

📚 Docs

  • New guides: Paid Registration, Upload Assistant; environment reference and getting started updated.
  • New optional variables: MONERO_WALLET_RPC_URL, MONERO_WALLET_PASSWORD, MONERO_DAEMON_ADDRESS, PAYMENT_CHECK_INTERVAL, PIXHOST_API_URL.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Nov 9, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 30 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available.

Learn how review limits work.

Review configuration:

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8324676b-be6f-4df1-817b-7e31c70f2c93
Commits

Reviewing files that changed from the base of the PR and between 966297e and bdb018d.

Files ignored due to path filters: 1

  • package-lock.json is excluded by !**/package-lock.json
Files selected for processing: 1

  • package.json
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@florianjs
florianjs merged commit 3d378f7 into main Nov 9, 2026
1 check passed
@github-actions
github-actions Bot deleted the release/v1.2.0 branch November 9, 2026 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant