Auto-wire Recyclarr and Unpackerr API keys

Author: liamvibecodes

README.md

@@ -33,6 +33,7 @@ There are dozens of *arr stack Docker Compose repos on GitHub. Almost all of the
 
 - **One command to install.** Clone, configure, and start everything with a single `curl | bash`. No 45-minute manual setup.
 - **Auto-configures itself.** The configure script wires up the core request/download stack via API (qBittorrent, Prowlarr, Radarr, Sonarr, Seerr). No clicking through those web UIs.
+- **Auto-wires keys.** The configure script also writes Radarr/Sonarr API keys into Recyclarr and Unpackerr automatically.
 - **Built for macOS.** Native paths, launchd instead of systemd, OrbStack or Docker Desktop instead of bare Docker. Not a Linux guide with "should work on Mac" in the footnotes.
 - **Self-healing.** Hourly health checks, download watchdog, VPN failover between providers. Runs unattended.
 - **Quality automation.** TRaSH Guides profiles filter out bad releases. Kometa keeps Plex metadata clean. Tdarr saves disk space with automatic transcoding.
@@ -187,7 +188,7 @@ Pre-configured templates in `configs/` (copy to your Media folder after first bo
 - **recyclarr.yml** - TRaSH Guides quality profiles for Radarr and Sonarr
 - **kometa.yml** - Plex metadata automation (franchise collections, resolution overlays)
 
-Both require API keys that are generated on first boot. The configure script will print them for you.
+Recyclarr API keys are auto-injected by `scripts/configure.sh`. Kometa still needs your manual Plex token + TMDB API key.
 
 ## Music Setup
 

SETUP.md

@@ -14,7 +14,7 @@ If you already have OrbStack (or Docker Desktop) and Plex installed, you can run
 curl -fsSL https://raw.githubusercontent.com/liamvibecodes/mac-media-stack-advanced/main/bootstrap.sh | bash
 ```
 
-It will prompt you for VPN keys, configure all services, and install automation jobs. You'll still need to do Step 7 (configure Recyclarr, Kometa, Tdarr, and Unpackerr with API keys) manually afterward.
+It will prompt you for VPN keys, configure all core services, auto-wire Recyclarr + Unpackerr API keys, and install automation jobs. You'll still need to do Step 7 for Kometa/Tdarr manual setup afterward.
 
 To run from a local clone with custom paths:
 
@@ -173,13 +173,8 @@ It also writes credentials/API keys to `<MEDIA_DIR>/state/first-run-credentials.
 
 ### Recyclarr (TRaSH quality profiles)
 
-The setup script copied a template to `<MEDIA_DIR>/config/recyclarr/recyclarr.yml` (default: `~/Media/config/recyclarr/recyclarr.yml`). Open it and replace the API key placeholders with the keys printed by configure.sh:
-
-```bash
-open -a TextEdit ~/Media/config/recyclarr/recyclarr.yml
-```
-
-Replace `YOUR_SONARR_API_KEY` and `YOUR_RADARR_API_KEY`, then save.
+`scripts/configure.sh` now auto-injects your Sonarr/Radarr API keys into `<MEDIA_DIR>/config/recyclarr/recyclarr.yml` (default: `~/Media/config/recyclarr/recyclarr.yml`).
+You only need to review it if you want to customize profile behavior.
 
 Recyclarr runs automatically at 3am daily. To trigger a manual sync:
 ```bash
@@ -208,14 +203,8 @@ Replace `YOUR_PLEX_TOKEN` and `YOUR_TMDB_API_KEY`, then save.
 
 ### Unpackerr
 
-Update `.env` with your Radarr and Sonarr API keys:
-```bash
-open -a TextEdit .env
-```
-Fill in `UN_SONARR_0_API_KEY` and `UN_RADARR_0_API_KEY`, then restart:
-```bash
-docker compose restart unpackerr
-```
+`scripts/configure.sh` now auto-writes `UN_SONARR_0_API_KEY` and `UN_RADARR_0_API_KEY` in `.env` and restarts Unpackerr.
+No manual edit is required unless you want to override defaults.
 
 ---
 

bootstrap.sh

@@ -272,15 +272,13 @@ echo "  Media location: $MEDIA_DIR"
 echo ""
 echo "  Remaining manual steps:"
 echo "    1. Set up Plex libraries (Movies: $MEDIA_DIR/Movies, TV: $MEDIA_DIR/TV Shows)"
-echo "    2. Edit $MEDIA_DIR/config/recyclarr/recyclarr.yml with your API keys"
-echo "    3. Edit $MEDIA_DIR/config/kometa/config.yml with Plex token + TMDB key"
-echo "    4. Update .env with Unpackerr API keys, then: docker compose restart unpackerr"
-echo "    5. Configure Tdarr at http://localhost:8265"
+echo "    2. Edit $MEDIA_DIR/config/kometa/config.yml with Plex token + TMDB key"
+echo "    3. Configure Tdarr at http://localhost:8265"
 echo ""
 echo "  Optional - Music (Lidarr + Tidarr):"
 echo "    bash scripts/setup-music.sh"
 echo "    docker compose --profile music up -d"
 echo "    Then open http://localhost:8484 to authenticate with Tidal"
 echo ""
-echo "  API keys were printed by the configure step above. Scroll up if needed."
+echo "  API keys were printed and Recyclarr/Unpackerr were auto-wired by configure.sh."
 echo ""

scripts/configure.sh

@@ -69,6 +69,81 @@ EOF
     chmod 600 "$CREDS_FILE"
 }
 
+set_env_key() {
+    local key="$1"
+    local value="$2"
+    local file="$3"
+    local safe_value
+
+    if [[ ! -f "$file" ]]; then
+        return 1
+    fi
+
+    safe_value="${value//\\/\\\\}"
+    safe_value="${safe_value//&/\\&}"
+
+    if grep -q "^${key}=" "$file"; then
+        sed -i '' "s|^${key}=.*|${key}=${safe_value}|" "$file"
+    else
+        printf '\n%s=%s\n' "$key" "$value" >> "$file"
+    fi
+}
+
+wire_recyclarr_keys() {
+    local recyclarr_cfg="$MEDIA_DIR/config/recyclarr/recyclarr.yml"
+    local tmp
+
+    if [[ ! -f "$recyclarr_cfg" ]]; then
+        warn "Recyclarr config not found at $recyclarr_cfg (skipping key injection)"
+        return 0
+    fi
+
+    tmp="$(mktemp)"
+    awk -v sonarr_key="$SONARR_KEY" -v radarr_key="$RADARR_KEY" '
+        /^sonarr:/ {section="sonarr"}
+        /^radarr:/ {section="radarr"}
+        {
+            if (section=="sonarr" && $0 ~ /^[[:space:]]+api_key:[[:space:]]*/) {
+                print "    api_key: " sonarr_key
+                next
+            }
+            if (section=="radarr" && $0 ~ /^[[:space:]]+api_key:[[:space:]]*/) {
+                print "    api_key: " radarr_key
+                next
+            }
+            print
+        }
+    ' "$recyclarr_cfg" > "$tmp"
+    mv "$tmp" "$recyclarr_cfg"
+    log "Recyclarr API keys written to $recyclarr_cfg"
+}
+
+wire_unpackerr_keys() {
+    local env_file="$SCRIPT_DIR/.env"
+    local unpackerr_state
+
+    if ! set_env_key "UN_SONARR_0_API_KEY" "$SONARR_KEY" "$env_file"; then
+        warn "Could not update UN_SONARR_0_API_KEY in $env_file"
+        return 0
+    fi
+    if ! set_env_key "UN_RADARR_0_API_KEY" "$RADARR_KEY" "$env_file"; then
+        warn "Could not update UN_RADARR_0_API_KEY in $env_file"
+        return 0
+    fi
+    log "Unpackerr API keys updated in .env"
+
+    unpackerr_state=$(docker inspect -f '{{.State.Status}}' unpackerr 2>/dev/null || true)
+    if [[ "$unpackerr_state" == "running" || "$unpackerr_state" == "created" || "$unpackerr_state" == "restarting" ]]; then
+        if docker compose restart unpackerr >/dev/null 2>&1; then
+            log "Unpackerr restarted to apply new API keys"
+        else
+            warn "Unpackerr restart failed; run 'docker compose restart unpackerr' manually"
+        fi
+    else
+        warn "Unpackerr container not found/running; start stack then run 'docker compose restart unpackerr'"
+    fi
+}
+
 api_post_json() {
     local label="$1"
     local url="$2"
@@ -176,6 +251,11 @@ PROWLARR_KEY=$(get_api_key "prowlarr")
 log "Prowlarr API key: ${PROWLARR_KEY:0:8}..."
 echo ""
 
+echo -e "${CYAN}[*] Wiring advanced configs...${NC}"
+wire_recyclarr_keys
+wire_unpackerr_keys
+echo ""
+
 # 3. Configure qBittorrent
 echo -e "${CYAN}[3/6] Configuring qBittorrent...${NC}"
 echo ""
@@ -324,9 +404,9 @@ echo "  Sonarr API Key:   $SONARR_KEY"
 echo "  Prowlarr API Key: $PROWLARR_KEY"
 echo "  Saved credentials: $CREDS_FILE"
 echo ""
-echo -e "  ${YELLOW}Save these!${NC} You'll need the API keys for:"
-echo "    - configs/recyclarr.yml (copy to $MEDIA_DIR/config/recyclarr/)"
-echo "    - .env (UN_SONARR_0_API_KEY and UN_RADARR_0_API_KEY for Unpackerr)"
+echo -e "  ${YELLOW}Auto-wired:${NC} Recyclarr + Unpackerr API keys"
+echo "  Remaining manual keys:"
+echo "    - $MEDIA_DIR/config/kometa/config.yml (PLEX_TOKEN, TMDB API key)"
 echo ""
 echo "  Seerr:       http://localhost:5055"
 echo "  Plex:        http://localhost:32400/web"