Merge pull request #28 from fonzdm/fix/unauthorized-torrent-webgui

Fix Unauthorized error when providing default credentials
fonzdm · Apr 25, 2024 · 259c8c7 · 259c8c7
2 parents 40798d9 + 3b53be5
commit 259c8c7
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 2 deletions.
diff --git a/servarr/README.md b/servarr/README.md
@@ -96,6 +96,7 @@ Servarr complete Helm Chart for Kubernetes
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| qbittorrent.csrf_protection | bool | false | Whether to enable or disable CSRF Protection on qBitTorrent WebGUI |
 | torrent.password | string | No default value | password of the qBitTorrent admin user. Must be at least of 8 characters. |
 | torrent.username | string | No default value | username of the qBitTorrent admin user |
 

diff --git a/servarr/config/scripts/init-qbittorrent.py b/servarr/config/scripts/init-qbittorrent.py
@@ -47,7 +47,10 @@
 MailNotification\req_auth=true
 WebUI\HostHeaderValidation=false
 WebUI\LocalHostAuth=false
-
+{{- if not (default .Values.qbittorrent.csrf_protection false) }}
+WebUI\CSRFProtection=false
+WebUI\ClickjackingProtection=false
+{{- end }}
 WebUI\Password_PBKDF2="{{`{{ torrentPassword }}`}}"
 WebUI\UseUPnP=false
 WebUI\Username={{`{{ torrentUsername }}`}}

diff --git a/servarr/values.yaml b/servarr/values.yaml
@@ -826,18 +826,24 @@ jellyseerr:
           main:
             mountPath: /mnt/media
 
-# @ignore
 qbittorrent:
+  # -- Whether to enable or disable CSRF Protection on qBitTorrent WebGUI
+  # @section -- Torrent
+  # @default -- false
+  csrf_protection: false
+  # @ignore
   metrics:
     main:
       enabled: *metricsEnabled
+  # @ignore
   workload:
     main:
       podSpec:
         containers:
           main:
             env:
               QBITTORRENT__USE_PROFILE: true
+  # @ignore
   ingress:
     qbittorrent-ing:
       enabled: true
@@ -861,6 +867,7 @@ qbittorrent:
           enabled: false
         traefik:
           enabled: false
+  # @ignore
   persistence:
     config:
       enabled: true