From 12253c23ddbd004c73f54939ad3cfac5cfbdcc44 Mon Sep 17 00:00:00 2001
From: rope <fredrik@nordhammer.it>
Date: Sat, 16 May 2026 21:01:11 +0100
Subject: [PATCH] arr: patch AuthenticationRequired to suppress auth
 enforcement

Newer *arr versions added AuthenticationRequired to config.xml and now
block access if it's not explicitly set. Patch it to
DisabledForLocalAddresses alongside the existing AuthenticationMethod
patch, since Authelia handles auth at the reverse proxy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 services/prowlarr.nix | 5 +++++
 services/radarr.nix   | 5 +++++
 services/sonarr.nix   | 5 +++++
 3 files changed, 15 insertions(+)

diff --git a/services/prowlarr.nix b/services/prowlarr.nix
index b38965b..f8594fd 100644
--- a/services/prowlarr.nix
+++ b/services/prowlarr.nix
@@ -8,6 +8,11 @@
       config_file="/var/lib/prowlarr/config.xml"
       if [ -f "$config_file" ]; then
         sed -i 's|<AuthenticationMethod>.*</AuthenticationMethod>|<AuthenticationMethod>None</AuthenticationMethod>|' "$config_file"
+        if grep -q '<AuthenticationRequired>' "$config_file"; then
+          sed -i 's|<AuthenticationRequired>.*</AuthenticationRequired>|<AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>|' "$config_file"
+        else
+          sed -i 's|</Config>|  <AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>\n</Config>|' "$config_file"
+        fi
       fi
     '';
 
diff --git a/services/radarr.nix b/services/radarr.nix
index 1edf26f..634e7af 100644
--- a/services/radarr.nix
+++ b/services/radarr.nix
@@ -17,6 +17,11 @@
       config_file="/var/lib/radarr/config.xml"
       if [ -f "$config_file" ]; then
         sed -i 's|<AuthenticationMethod>.*</AuthenticationMethod>|<AuthenticationMethod>None</AuthenticationMethod>|' "$config_file"
+        if grep -q '<AuthenticationRequired>' "$config_file"; then
+          sed -i 's|<AuthenticationRequired>.*</AuthenticationRequired>|<AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>|' "$config_file"
+        else
+          sed -i 's|</Config>|  <AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>\n</Config>|' "$config_file"
+        fi
       fi
     '';
 
diff --git a/services/sonarr.nix b/services/sonarr.nix
index 5404c35..b6a500a 100644
--- a/services/sonarr.nix
+++ b/services/sonarr.nix
@@ -17,6 +17,11 @@
       config_file="/var/lib/sonarr/config.xml"
       if [ -f "$config_file" ]; then
         sed -i 's|<AuthenticationMethod>.*</AuthenticationMethod>|<AuthenticationMethod>None</AuthenticationMethod>|' "$config_file"
+        if grep -q '<AuthenticationRequired>' "$config_file"; then
+          sed -i 's|<AuthenticationRequired>.*</AuthenticationRequired>|<AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>|' "$config_file"
+        else
+          sed -i 's|</Config>|  <AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>\n</Config>|' "$config_file"
+        fi
       fi
     '';