Skip to content

History / Security

Revisions

  • docs: sweep remaining rule examples from name: to id:/meta.description

    @andronics andronics committed Sep 28, 2026
  • docs: add Metrics page for the new optional Prometheus support New Metrics.md covers enabling/auth, the fork-safety design (mirroring Scheduling.md's own multi-worker writeup), the full metric reference table, and cardinality rationale for action_type-only labels. Linked from Home.md/_Sidebar.md, cross-referenced from HTTP-API-Reference.md (JSON vs text-exposition routes), Architecture-Internals.md (module map + fork-safety note), Security.md (auth model, what's exposed), and Scheduling.md (reciprocal link -- same category of fork-safety problem, different solution).

    @andronics andronics committed Sep 14, 2026
  • docs: add Dashboard page for the new read-only web dashboard New Dashboard.md covers pages/routes, the ?key= auth model and its browser-history trade-off, rules-view availability, and current scope limits (read-only, no auto-refresh). Linked from Home.md and _Sidebar.md; cross-referenced from HTTP-API-Reference.md (JSON vs HTML routes), Architecture-Internals.md (module map), and Security.md (key reuse + access-log suppression note).

    @andronics andronics committed Sep 14, 2026
  • docs: rename arr_blocklist_and_search to arr_blocklist, document search param Matches the main repo's rename to fit the codebase's snake_case action naming convention, and documents the new params.search (default true) -- set false to blocklist without triggering a re-search.

    @andronics andronics committed Sep 14, 2026
  • docs: document arr_blocklist_and_search action (Sonarr/Radarr) Adds the action's full reference to Actions.md (params, payload behavior, season-pack/multi-episode handling, ordering warning around remove_from_client), links it from the existing category-based Sonarr/Radarr integration section in Advanced-Topics.md (a different capability -- clarified to avoid confusion), and documents the new integrations: config section in In-Depth-Configuration.md and Security.md.

    @andronics andronics committed Sep 14, 2026
  • Drop redundant default_ prefix from notifications config keys notifications.default_webhook_url / notifications.default_service -> notifications.webhook_url / notifications.service, matching the v0.6.0 code change. "default" was redundant with the section name and inconsistent with every other config section's naming. Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL

    @andronics andronics committed Sep 14, 2026
  • Document the notify action (v0.6.0) New notify action reference in Actions.md: parameter table, payload shape per service (Discord/Slack/ntfy/generic), message templating (including the tags cleanup), the delete_torrent chaining behavior, and the duplicate-notification caveat with the add_tag workaround. Replace Advanced-Topics.md's now-stale "there's no built-in notification action, here's how to build one" section with a pointer to the real thing. Document the new notifications: config section in In-Depth Configuration, and flag webhook URLs as just as sensitive as a password in Security's credential-management guidance. Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL

    @andronics andronics committed Sep 14, 2026
  • Add first-class Security section and a For Developers section Security content was scattered — a subsection buried in Advanced-Topics, plus a production lesson about magnet-link metadata timing tucked into Contexts. Pull it all into a standalone Security page (threat model, API auth, network exposure, credential management, content-safety rules, the metadata-timing limitation, log hygiene, vulnerability reporting) and give it its own sidebar category instead of hiding it in Configuration. Also split codebase-facing content out of Advanced-Topics (an end-user page) into a proper Developers section: Architecture Internals (module map, process boundaries, request lifecycle), Extending the Engine (custom operators/actions, moved out wholesale), a Testing Guide grounded in the real pytest layout and markers, and a Release Process page grounded in the actual bump-version.sh/release.yml/docker-build.yml pipeline. Contributing now cross-links into these instead of standing alone. Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL

    @andronics andronics committed Sep 12, 2026