07-seerr.md
kstack: book: Centerpoint Home Lab chapter: Media & Entertainment page: Seerr tags: [seerr, overseerr, media-requests, plex, jellyfin]
Overview
emptySeerr is a media request management application — a maintained fork of Overseerr.
It provides a user-friendly interface for requesting movies and TV shows, which
are then forwarded to the *arr stack (Radarr, Sonarr) for automated download and
delivery to Plex and Jellyfin. It also surfaces Plex availability status so users
can see what is already in the library before requesting.
Access
https://seerr.home.local
LAN access via Step-CA TLS
External
https://seerr.jeeves5454.ddns.net
Authentik SSO + GeoBlock + CrowdSec
Configuration
Image: ghcr.io/seerr-team/seerr:latest
Compose project: arr stack (managed via Portainer alongside the *arr services)
Traefik Labels
# External route
traefik.http.routers.seerr-external.rule: Host(`seerr.jeeves5454.ddns.net`)
traefik.http.routers.seerr-external.entrypoints: websecure
traefik.http.routers.seerr-external.tls.certresolver: letsencrypt
traefik.http.routers.seerr-external.middlewares: authentik-auth@docker,plex-geoblock@file,crowdsec-bouncer@file
traefik.http.routers.seerr-external.service: seerr-svc
# Internal route
traefik.http.routers.seerr-internal.rule: Host(`seerr.home.local`)
traefik.http.routers.seerr-internal.entrypoints: websecure
traefik.http.routers.seerr-internal.tls.certresolver: step-ca
traefik.http.routers.seerr-internal.service: seerr-svc
traefik.http.services.seerr-svc.loadbalancer.server.port: 5055
Environment Variables
PORT
5055
Application port
LOG_LEVEL
debug
Logging verbosity
TZ
America/Toronto
Timezone
NODE_ENV
production
Runtime environment
Volumes / Bind Mounts
/home/jeeves/docker/arr/Seer/config
/app/config
Seerr database and configuration
Networks
traefik-net
Exposes Seerr UI
media-network
Internal network shared with *arr stack services (Sonarr, Radarr, etc.)
The media-network attachment allows Seerr to communicate directly with Sonarr,
Radarr, and Plex by container hostname without going through Traefik.
Dependencies
Notes / Gotchas
github.com/seerr-team/seerr.
User permissions and notification settings are configured inside the Seerr UI.
When Authentik is used for ForwardAuth, Seerr should be configured to use
"Sign-in with Plex" or local accounts for user identity — not OIDC directly.
Seerr's config database at /app/config contains API keys for Plex, Sonarr, and
Radarr. Back it up before upgrades.
Last Updated: 2026-06-16