[florianjs]

Trackarr 1.1.0: admins can restyle the whole site, *arr apps get their own API key, and admins can correct a member's ratio.

No breaking changes: no new required variable. Update as usual (git pull then docker compose -f docker-compose.prod.yml up -d --build); schema changes are applied at startup.

🎨 Appearance editor

Admin → Appearance lets you restyle the site without touching the code (#94):

• Theme: presets, per-token colours for light and dark themes, corner radius.
• Fonts: body, heading and mono, from a bundled set (no external requests).
• Images: login page picture and home banner.
• Login page: four layouts (centered, split, background, minimal) with live preview, shared by sign-in and sign-up.
• Texts: any interface text can be overridden per language. Admin text is never interpreted as HTML or message syntax.

🔌 Integrations for Prowlarr, Sonarr, Radarr

• Dedicated tk_ API key for Torznab (feat(torznab): dedicated api key and integrations page #93): a leaked key is rotated without re-downloading every torrent. Existing indexers configured with the passkey keep working.
• New /integrations page: URL, API path and key with copy buttons, per-app setup steps, connection test and key rotation.
• Members can reset their own passkey from this page, with a warning that torrents downloaded before must be downloaded again.
• Torznab API keys are encrypted by panic mode along with the other user secrets.

⚖️ Ratio correction

Admin → Users: add to or remove from a member's uploaded/downloaded totals (#95).

• Required reason, preview of the resulting totals and ratio, history of past corrections.
• Applied under a row lock, like tracker updates: neither write is lost, totals never go below 0.
• Reasons are encrypted by panic mode.

🐛 Fixes

• Startup migrations (fix(db): apply guarded sql migrations before push and fail on push errors #96): without a terminal, drizzle-kit push could stop on a question, exit successfully anyway and leave the app on the old schema (logins failing on column "api_key" does not exist). Recent migrations are now applied before the push, and a failed push stops startup instead of going unnoticed.
• Pages returning 500 under load: internal requests during server-side rendering all shared the address unknown, which ended up blacklisted by the DDoS detector. They no longer go through those checks.
• Beszel monitoring (feat(monitoring): pairing script and step-by-step beszel guide #91, fix(monitoring): drop basic auth in front of beszel #92): Caddy basic auth removed (it looped on the password prompt); Beszel's own login protects the UI, its account is created from BESZEL_ADMIN_EMAIL / BESZEL_ADMIN_PASSWORD, and account creation from the browser is blocked. New scripts/pair-monitoring.sh script and step-by-step pairing guide.

📚 Docs

• README security section redesigned (Mermaid diagrams, table of what each mechanism protects against and what panic mode encrypts).
• New demo URL: trackarr.florianargaud.com.

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 50 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available.

Learn how review limits work.

Review configuration:

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 133fe417-32ab-4505-8f71-f8ec29a9699c

Commits

Reviewing files that changed from the base of the PR and between 7dfb0cf and 8ed251d.

Files ignored due to path filters: 1

• package-lock.json is excluded by !**/package-lock.json

Files selected for processing: 1

• package.json

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}