One-command self-hosted media server. Request a movie or TV show and it's automatically downloaded, organized, subtitled, and ready to stream — like running your own Netflix.

bash <(curl -fsSL https://raw.githubusercontent.com/unbalancedparentheses/media-server/main/install.sh)

You ──> Jellyseerr (request) ──> Sonarr / Radarr ──> Prowlarr ──> Indexers
                                        │
                            qBittorrent / SABnzbd
                              (through VPN tunnel)
                                        │
                                 download completes
                                  ├── Bazarr (subtitles)
                                  └── Tdarr (transcode to H.265)
                                        │
                               Jellyfin (stream it)
                                        │
                          Janitorr (clean up unwatched)

1. Request a movie or show through Jellyseerr (Netflix-like browse and request UI)
2. Sonarr (TV/anime) or Radarr (movies) searches indexers via Prowlarr
3. Best match is sent to qBittorrent (through VPN) or SABnzbd (Usenet)
4. File is downloaded, renamed, and added to your Jellyfin library
5. Bazarr fetches subtitles automatically (English + Spanish by default)
6. Tdarr transcodes to H.265 in the background to save ~40-50% storage
7. Janitorr removes content nobody has watched after a grace period

bash <(curl -fsSL https://raw.githubusercontent.com/unbalancedparentheses/media-server/main/install.sh)

Clones to ~/media-server, prompts for credentials, and runs full setup.

git clone https://github.com/unbalancedparentheses/media-server.git
cd media-server
cp config.toml.example config.toml  # optional — setup creates one if missing
./setup.sh

Fully idempotent — safe to re-run at any time.

1. Installs Docker + dependencies
2. Prompts for Jellyfin and qBittorrent credentials (or generates them with --yes)
3. Creates ~/media/ directory structure (libraries, downloads, configs)
4. Starts 25+ containers via Docker Compose
5. Wires every service together (API keys, download clients, indexers, subtitles)
6. Sets authentication on all services (Jellyfin credentials shared across the stack)
7. Adds .media.local domains to /etc/hosts
8. Runs 90+ verification checks

./setup.sh                      # Full setup (interactive)
./setup.sh --yes                # Full setup (non-interactive, generates passwords)
./setup.sh --test               # Run verification checks only
./setup.sh --update             # Pull latest images + restart
./setup.sh --backup             # Backup all service configs
./setup.sh --restore <file>     # Restore from backup
./setup.sh --preflight          # Check prerequisites + config
./setup.sh --check-config       # Validate config.toml only
./setup.sh --dry-run            # Preview actions without changing anything

Edit config.toml before running setup, or let setup prompt you interactively. See config.toml.example for all options.

[jellyfin]
username = "admin"
password = "changeme"

[qbittorrent]
username = "admin"
password = "changeme"

Setup prompts for real passwords on first run. With --yes, secure random passwords are generated automatically. Jellyfin credentials are shared across most services (Sonarr, Radarr, Prowlarr, Bazarr, SABnzbd, Navidrome, Immich).

[quality]
sonarr_profile = "WEB-1080p"
sonarr_anime_profile = "Remux-1080p - Anime"
radarr_profile = "HD Bluray + WEB"

TRaSH Guide profiles synced by Recyclarr. Defaults: 1080p web for TV, remux for anime, HD bluray for movies.

[subtitles]
languages = ["en", "es"]
providers = ["opensubtitlescom", "podnapisi", "yifysubtitles"]

English always downloaded, additional languages when available. Nine providers pre-configured — some need free accounts (OpenSubtitles, Addic7ed), configurable in the Bazarr UI after setup.

Pre-configured with public torrent indexers and anime indexers:

[[indexers]]
name = "1337x"
definitionName = "1337x"
enable = true
flaresolverr = true      # needs FlareSolverr for Cloudflare bypass

[[indexers]]
name = "Nyaa.si"
definitionName = "nyaasi"
enable = true
anime = true             # routes to Sonarr Anime only

Included by default: 1337x, EZTV, The Pirate Bay, YTS, Knaben, LimeTorrents, BitSearch, MegaPeer, Nyaa.si, SubsPlease, Mikan, Bangumi Moe. Add private trackers or usenet indexers as needed.

[vpn]
enable = false
provider = "mullvad"
type = "wireguard"
wireguard_private_key = ""
wireguard_addresses = ""
server_countries = "Switzerland"

Routes torrent traffic through Gluetun. 30+ providers supported (Mullvad, ProtonVPN, NordVPN, Surfshark, etc.). Kill switch built in. Optional — disabled by default.

[[usenet_providers]]
name = "usenet"
enable = false
host = ""
port = 563
ssl = true
username = ""
password = ""
connections = 20

Optional. Faster and more private than torrents, but requires a paid Usenet provider (Newshosting, Eweka, Frugal Usenet, etc.).

All services are available at http://<service>.media.local after setup.

For remote access, Tailscale provides mesh VPN with automatic HTTPS. Share with family/friends by inviting them to your tailnet.

~/media/
├── movies/              # Radarr
├── tv/                  # Sonarr
├── anime/               # Sonarr Anime
├── music/               # Lidarr / Navidrome
├── photos/              # Immich
├── downloads/
│   ├── torrents/
│   └── usenet/
├── config/              # Per-service config directories
├── transcode_cache/     # Tdarr working directory
├── leaving-soon/        # Janitorr staging area
└── backups/             # Auto-pruned, keeps last 10

Some things you could add alongside this stack:

• Kavita — ebooks, comics, manga
• Readarr — book/audiobook automation
• Audiobookshelf — audiobook and podcast server
• Mylar3 — comic book automation
• TubeArchivist — YouTube archive
• Autobrr — IRC/RSS automation for private trackers