Profiles
Custom Formats
Quality Definitions
File Naming
Maintenance
Advanced
Settings
About
TRaSH Changelog from updates.txt
⚠️ Authentication is disabled — anyone who reaches this URL is admin. Set Authentication to Forms or Basic in Settings → Security, or make sure another auth layer (reverse proxy, firewall) is in front.
Profile Builder
Experimental. Build custom profiles with fixed scores, or import from Recyclarr YAML. Profiles here do not auto-sync with TRaSH Guide updates.
Your Profiles
← Back to Profiles
Profile Settings
Initialize from
General
Language
Upgrades Allowed
Min Score
Min Upgrade Score
Cutoff Score
Score Set
Quality
Cutoff
Quality Preset
Quality Items
Toggle resolutions on/off. Qualities higher in the list are more preferred.
Drag rows to reorder · drop on a row to merge · click group name to rename
· ·
← Back to Profiles
General
Language
Upgrades Allowed
Min Score
Min Upgrade Score
Cutoff Score
Score Set
Quality
Cutoff
Quality Items
Settings
Configure Clonarr — instances, TRaSH repository, Prowlarr, notifications, and display.
Instances
TRaSH Guides
Prowlarr
Notifications
Display
Security
Advanced
Instances
Connect your Radarr and Sonarr instances.
TRaSH Guides
Repository settings and sync status.
Repository URL
Branch
Pull Interval
Auto-pull TRaSH data at this interval
Status
Prowlarr
Connect Prowlarr to enable release searching in the Scoring Sandbox.
Connection
Radarr categories
Category IDs for movie searches
Sonarr categories
Category IDs for TV searches
Leave blank for defaults. Add sub-IDs (e.g. 2000, 2040, 2045) if your indexer only tags specific sub-categories and root-only searches return no results.
Notifications
Auto-sync event notifications via Discord, Gotify, and Pushover.
Events
Discord
Enable
Sync webhook
Sync success, failure, and cleanup
Updates webhook
TRaSH repo updates and weekly changelog
Gotify
Enable
URL
App Token
Levels
Critical: sync failures · Warning: stale cleanup · Info: sync success, repo updates, changelog
Pushover
Enable
User Key
App Token
Display
UI appearance settings.
UI Scale
Security
Authentication, API key, and password. Same pattern as Radarr/Sonarr.
Authentication
How users log in. Forms for most users. Basic behind a reverse proxy that handles login. None disables auth entirely — only safe behind another auth layer or on a machine not reachable from other devices.
Authentication Required
Enabled requires a password from every request including your LAN. Disabled for Trusted Networks lets devices on the networks listed below skip the login page.
Trusted Networks
Locked by TRUSTED_NETWORKS environment variable. To change the value, edit the Unraid template (or docker-compose.yml) and restart the container. Unsetting the env var unlocks this field.
IPs or CIDR subnets that skip login when Authentication Required is "Disabled for Trusted Networks". Every address in this list gets full admin access without a password.

Leave empty falls back to all private networks (10.x, 172.16-31.x incl. Docker bridges, 192.168.x, link-local, IPv6 ULA). Convenient but treats any container on your Docker host and any device on your home WiFi as admin.

Set explicitly to narrow: 192.168.86.0/24 (home VLAN), 10.66.0.0/24 (WireGuard), 192.168.86.22/32 (one device). Loopback is always trusted so healthchecks work.

Lock via env var TRUSTED_NETWORKS (comma-separated CIDRs) in the Unraid template to prevent this field from being changed through the UI — useful if you want host-level control over the trust boundary.
Trusted Proxies
Locked by TRUSTED_PROXIES environment variable. To change the value, edit the Unraid template (or docker-compose.yml) and restart the container.
Only needed if Clonarr runs behind a reverse proxy (SWAG, Authelia, etc). List the proxy's IP so X-Forwarded-For is trusted. Leave empty for direct access. Lock via env var TRUSTED_PROXIES in the Unraid template for host-level control.
Session TTL (days)
How long a login stays valid before re-authentication. Default 30. Max 365.
API Key
For scripts and Homepage widgets. Send as X-Api-Key: <key> header. Query parameter (?apikey=) also works but leaks to logs and browser history — prefer the header.
Change password
Current password
New password
At least 10 characters, with at least 2 of: uppercase, lowercase, digit, symbol.
Confirm new password
Changing your password signs out other sessions. You will remain logged in on this browser.
Advanced
Developer tools and debug logging.
Advanced Mode
Active
Debug Logging
Download
About
Information about Clonarr, TRaSH Guides data, and credits.
TRaSH Guides
All quality profiles, custom format definitions, naming schemes, and quality size data used in this application come from the TRaSH Guides project. Their comprehensive, community-maintained documentation for Radarr, Sonarr, and related tools is what makes projects like this possible. A huge thank you to TRaSH and all contributors for the incredible work they put into maintaining these guides.
Website — trash-guides.info GitHub — TRaSH-Guides/Guides Discord
Clonarr — Built by ProphetSe7en

⚠️ Disable authentication?

You are about to turn off login for Clonarr. After this change, anyone who reaches this UI will be admin — they can modify your Radarr/Sonarr/Prowlarr API keys, change Discord webhooks to their own server, and read every notification token.

Pick this only if you have another authentication layer in front (Authelia, Cloudflare Access) or you are running on a machine that is not reachable from other devices.

A persistent red warning banner will be shown at the top of every page while authentication is disabled, and the server logs a warning every 60 seconds.