Authentication

The web UI optionally supports HTTP basic authentication. It's off by default — no login is required until you enable it.

---

Enabling it

Set it under Settings → General (Web UI Authentication), or in config.yaml:

web:
  auth:
    enabled: true
    username: admin
    password: changeme

Changes take effect immediately — no restart required.

---

Fail-open behavior

If config.yaml can't be read or the auth block is malformed, Inspectarr fails open — it lets you in rather than locking you out of a misconfigured instance. Authentication is only enforced when enabled is true and both a username and password are set.

---

A note on security

Basic auth sends credentials with every request. For anything exposed beyond your local network, put Inspectarr behind a reverse proxy with HTTPS so those credentials aren't travelling in the clear. Basic auth on its own is a light access gate, not a substitute for transport encryption.