Unable to download torrents when prowlarr is on localhost

[flyingpeakock]

I get the error url not allowed: points to loopback address is there any way to get around this?

[vavallee]

The download fetch blocks loopback on purpose: the .torrent/.nzb URL comes from the indexer's response, not from your config, so a compromised indexer could otherwise aim it at a service bound to Bindery's own 127.0.0.1. Your Prowlarr base URL is fine on loopback (and search already reaches it that way), but the download link it hands back is what gets rejected.

Two ways forward:

1. Works on current Bindery. Point Bindery at Prowlarr by a non-loopback address so the links it returns land in RFC1918, which is allowed. Use the host LAN IP, the Docker bridge gateway (172.17.0.1 / host.docker.internal), or the compose service name (e.g. http://prowlarr:9696). This only falls short if Bindery itself runs with network_mode: host and Prowlarr binds 127.0.0.1 only.

2. For that host network, loopback only case. I just added an opt-in: set BINDERY_DOWNLOAD_ALLOW_LOOPBACK=1. It relaxes the download fetch to allow loopback while link-local and cloud-metadata stay blocked. It's merged (#1078) and ships in the next release; bindery-dev has it now if you want it sooner.