TRaSH Changelog from updates.txt
⚠️ Authentication is disabled — anyone who reaches this URL is admin. Set Authentication to Forms or Basic in Settings → Security, or make sure another auth layer (reverse proxy, firewall) is in front.
Profile Builder
Experimental. Build custom profiles with fixed scores, or import from Recyclarr YAML. Profiles here do not auto-sync with TRaSH Guide updates.
Your Profiles
CF Group Builder
Group your custom formats so they're easy to reuse across profiles. Pick the custom formats that belong together, mark which are required, and link them to quality profiles. Save the group locally to keep iterating on it, or export it as JSON for backup.
Build a cf-groups/*.json file — for TRaSH-Guides contribution, or for your own personal use. Pick custom formats, mark which are required, link to quality profiles. Save locally to iterate on later, or export as JSON. Hash (trash_id) auto-computed from the group name.
New cf-group Copying from TRaSH: — will save as new local cf-group Editing
Selected CFs
Custom Formats
Quality Profiles
custom CFs selected. These have IDs starting custom: and won't resolve in TRaSH-Guides. Save locally for personal use, but don't include them in a Download meant for contribution.

        
← Back to Profiles
Initialize from
General
Language
Upgrades Allowed
Min Score
Min Upgrade Score
Cutoff Score
Score Set
Quality
Cutoff
Quality Preset
Quality Items
· ·
← Back to Profiles
Language
Min Score
Min Upgrade Score
Cutoff Score
Upgrades Allowed
Score Set
Cutoff
Quality Items
⚠ Non-standard for this profile — use at your own risk
No matching CFs
Settings
Configure Clonarr — instances, TRaSH repository, Prowlarr, notifications, and display.
Instances
Connect your Radarr and Sonarr instances.
TRaSH Guides
Repository settings and sync status.
Repository URL
Branch
Pull Interval
Auto-pull TRaSH data at this interval
Status
Prowlarr
Connect Prowlarr to enable release searching in the Scoring Sandbox.
Connection
Radarr categories
Category IDs for movie searches
Sonarr categories
Category IDs for TV searches
Leave blank for defaults. Add sub-IDs (e.g. 2000, 2040, 2045) if your indexer only tags specific sub-categories and root-only searches return no results.
Notifications
Auto-sync event notifications via Discord, Gotify, and Pushover.
Display
UI appearance settings.
Theme
UI Scale
Security
Authentication, API key, and password. Same pattern as Radarr/Sonarr.
Authentication
How users log in. Forms for most users. Basic behind a reverse proxy that handles login. None disables auth entirely — only safe behind another auth layer or on a machine not reachable from other devices.
Authentication Required
Enabled requires a password from every request including your LAN. Disabled for Trusted Networks lets devices on the networks listed below skip the login page.
Trusted Networks
Locked by TRUSTED_NETWORKS environment variable. To change the value, edit the Unraid template (or docker-compose.yml) and restart the container. Unsetting the env var unlocks this field.
IPs or CIDR subnets that skip login when Authentication Required is "Disabled for Trusted Networks". Every address in this list gets full admin access without a password.

Leave empty falls back to all private networks (10.x, 172.16-31.x incl. Docker bridges, 192.168.x, link-local, IPv6 ULA). Convenient but treats any container on your Docker host and any device on your home WiFi as admin.

Set explicitly to narrow: 192.168.86.0/24 (home VLAN), 10.66.0.0/24 (WireGuard), 192.168.86.22/32 (one device). Loopback is always trusted so healthchecks work.

Lock via env var TRUSTED_NETWORKS (comma-separated CIDRs) in the Unraid template to prevent this field from being changed through the UI — useful if you want host-level control over the trust boundary.
Trusted Proxies
Locked by TRUSTED_PROXIES environment variable. To change the value, edit the Unraid template (or docker-compose.yml) and restart the container.
Only needed if Clonarr runs behind a reverse proxy (SWAG, Authelia, etc). List the proxy's IP so X-Forwarded-For is trusted. Leave empty for direct access. Lock via env var TRUSTED_PROXIES in the Unraid template for host-level control.
Session TTL (days)
API Key
For scripts and Homepage widgets. Send as X-Api-Key: <key> header. Query parameter (?apikey=) also works but leaks to logs and browser history — prefer the header.
Change password
Current password
New password
At least 10 characters, with at least 2 of: uppercase, lowercase, digit, symbol.
Confirm new password
Changing your password signs out other sessions. You will remain logged in on this browser.
Advanced
Power-user features and debug logging. Enable only what you need.
Advanced Mode
Active
Show TRaSH schema fields (CLONARR_DEV_FEATURES)
Active
URL Base
Set via URL_BASE env var. Restart to change.
Debug Logging
About
Information about Clonarr, TRaSH Guides data, and credits.
TRaSH Guides
All quality profiles, custom format definitions, naming schemes, and quality size data used in this application come from the TRaSH Guides project. Their comprehensive, community-maintained documentation for Radarr, Sonarr, and related tools is what makes projects like this possible. A huge thank you to TRaSH and all contributors for the incredible work they put into maintaining these guides.
Website — trash-guides.info GitHub — TRaSH-Guides/Guides Discord
Clonarr — Built by ProphetSe7en

You are about to turn off login for Clonarr. After this change, anyone who reaches this UI will be admin — they can modify your Radarr/Sonarr/Prowlarr API keys, change Discord webhooks to their own server, and read every notification token.

Pick this only if you have another authentication layer in front (Authelia, Cloudflare Access) or you are running on a machine that is not reachable from other devices.

A persistent red warning banner will be shown at the top of every page while authentication is disabled, and the server logs a warning every 60 seconds.