---
title: "SDBX — Self-hosted seedbox automation for Linux"
description: "A self-hosted seedbox and media stack for Linux boxes with suspiciously large disks."
---

# SDBX

> Your server. Your bandwidth. Your business. One connected system for downloading, organizing, and streaming media.

Canonical page: https://sdbx.one/

SDBX is an open-source seedbox CLI and authenticated management console for Linux boxes with suspiciously large disks. It turns explicit choices into a reproducible Docker Compose project with a verified lock file, without a hosted control plane or SDBX account.

SDBX is intended for media and sources the operator is legally permitted to access.

## Operator modes

- **Dashboard**: the remote-ready Web UI at the canonical SDBX root is protected by Authelia administrators and private Traefik mTLS. It exposes service status, bounded logs, addons, typed settings, security evidence, encrypted backups, diagnostics, audit history, and guarded stack actions. It is designed for first-time and experienced operators who prefer a polished UI after a day spent managing servers.
- **CLI advanced mode**: the complete command surface supports project initialization, generation, locks, lifecycle, registries, addons, presets, integrations, backups, diagnostics, and structured JSON output for automation.
- Both interfaces operate the same `.sdbx.yaml`, `.sdbx.lock`, generated Compose project, and local broker safeguards. The interface choice distinction is presentation and project lore, not a security boundary.

## Product workflow

1. **Discover** releases through configured indexers such as Prowlarr.
2. **Download** through qBittorrent and, when enabled, Gluetun VPN policy.
3. **Organize** libraries through automation services such as Sonarr.
4. **Watch** through Jellyfin, Plex, or both.
5. **Operate** the generated stack through the CLI or authenticated dashboard.

## Supported platforms

- linux/amd64: supported
- linux/arm64: compatibility

Release: v1.0.0-RC1 (release-candidate)
License: MIT

## Service catalog

40 services: 7 core and 33 optional addons.

### Networking
- **cloudflared** (core): Remote-managed Cloudflare Tunnel connector
- **gluetun** (core): VPN client with kill switch for Docker containers
- **traefik** (core): Modern HTTP reverse proxy and load balancer

### Auth
- **authelia** (core): Single Sign-On Multi-Factor portal

### Downloads
- **autobrr** (addon): IRC and RSS download automation for torrents and Usenet
- **cobalt** (addon): Self-hosted cobalt API backend for media-download requests
- **cross-seed** (addon): Internal cross-seeding daemon for compatible torrent trackers
- **nzbhydra2** (addon): Usenet indexer meta-search aggregator
- **pyload** (addon): Web-managed HTTP and file-hoster download client
- **qbit-manage** (addon): Scheduled qBittorrent tagging, cleanup, and data management
- **qbittorrent** (core): Free and open-source BitTorrent client
- **qui** (addon): Modern multi-instance qBittorrent Web UI and workflow engine
- **sabnzbd** (addon): Usenet binary downloader with complete and incomplete queues

### Media
- **audiobookshelf** (addon): Audiobook and podcast server with multi-user progress sync
- **bazarr** (addon): Subtitle management for movies and TV shows
- **calibre-web** (addon): Web interface for browsing, reading, and downloading a Calibre library
- **jellyfin** (core): Open-source media server (Plex alternative)
- **kometa** (addon): Scheduled Plex metadata, collection, playlist, and overlay manager
- **komga** (addon): Comic, manga, and ebook library server with OPDS support
- **lidarr** (addon): Music collection automation and management
- **navidrome** (addon): Subsonic-compatible music streaming server
- **plex** (core): Media server for streaming movies, TV, and music
- **prowlarr** (addon): Indexer manager for *arr applications
- **radarr** (addon): Movie collection automation and management
- **seerr** (addon): Media request and discovery portal for Plex and Jellyfin
- **sonarr** (addon): TV Shows automation and management
- **stash** (addon): Private media organizer with metadata, previews, and transcoding
- **tdarr** (addon): Distributed media transcoding with a safe CPU-only internal node
- **whisparr** (addon): Whisparr v3 adult-media automation and management
- **wizarr** (addon): Invitation and onboarding portal for media server users

### Management
- **tautulli** (addon): Plex activity monitoring, analytics, and notifications

### Utility
- **decluttarr** (addon): Queue cleanup automation for supported *arr applications
- **filebrowser** (addon): Web file manager for browsing, uploading, and organising seedbox files
- **flaresolverr** (addon): Internal challenge-solving proxy for compatible indexers
- **janitorr** (addon): Scheduled media lifecycle automation for *arr and media servers
- **maintainerr** (addon): Rule-based media-library lifecycle management
- **notifiarr** (addon): Notification and monitoring client for media automation services
- **profilarr** (addon): Quality profile and custom format management for Sonarr and Radarr
- **recyclarr** (addon): Scheduled quality-profile synchronization for Sonarr and Radarr
- **unpackerr** (addon): Background archive extractor for completed downloads and supported Arr services

## Selected addon behavior

- **Seerr** is the only supported request portal. SDBX does not promise an automatic migration from Overseerr.
- **Calibre-Web** preserves the selected upstream image's documented first login (`admin` / `admin123`). Change it immediately; the SDBX route adds an outer administrator boundary but does not replace the application credential.
- **pyLoad** preserves the selected upstream image's documented first login (`pyload` / `pyload`). Change it immediately.
- **Cobalt** is the official self-hosted API. Use `sdbx secrets show cobalt --confirm reveal`, then configure the endpoint and key at https://cobalt.tools/settings/instances.
- **Unpackerr** is an internal worker with no Web UI. SDBX generates its supported Arr endpoints and file-backed API-key copies.
- **Whisparr** uses the selected publisher's v3 stable line and joins the managed Arr authentication, Prowlarr, qBittorrent, and Unpackerr flows.
- **Notifiarr** keeps application notifications and service checks without Docker-socket access. **Tdarr** defaults to a portable CPU node; GPU access is not implicitly granted.

## Presets

- **TV automation (Jellyfin)**: Curated Jellyfin TV automation with Sonarr, Prowlarr for indexers, and File Browser for direct file access. Addons: filebrowser, prowlarr, sonarr.
- **TV automation (Plex)**: Curated Plex TV automation with Sonarr, Prowlarr for indexers, and File Browser for direct file access. Addons: filebrowser, prowlarr, sonarr.
- **Minimal seedbox**: Just the essentials: qBittorrent behind a VPN, plus a web file browser to poke at downloads. No automation, no media server, no requests. The smallest sane stack. Addons: filebrowser.
- **Power user**: Broad movie, TV, music, subtitle and Usenet automation with direct file access and scheduled profile synchronization. Specialist libraries, invitation portals and transcoders stay opt-in. Addons: bazarr, filebrowser, lidarr, nzbhydra2, prowlarr, radarr, recyclarr, sabnzbd, sonarr.

## Primary commands

- `sdbx init`: create a project through the guided setup.
- `sdbx lock verify`: verify the current catalog graph, locked image pins, and generated files.
- `sdbx up`: start the active locked service graph.
- `sdbx down`: stop the stack while preserving project data.
- `sdbx status`: inspect services, health, and routes.
- `sdbx doctor`: run host and stack diagnostics.
- `sdbx integrate --dry-run`: preview supported service integrations.
- `sdbx integrate`: apply supported service integrations.
- `sdbx addon list --all`: list addons across the configured service sources.
- `sdbx backup`: create an authenticated age-encrypted backup of project configuration and secrets.
- `sdbx serve`: run the brokered management console used by the generated secure route.

## Important boundaries

- **linux-host-only**: v1 first-class host support is Linux amd64; Linux arm64 is a compatibility build, and macOS is development-only.
- **docker-root-equivalent**: Docker access and the root broker are host-privileged trust boundaries.
- **authenticated-console**: The management console is public only through the generated Authelia admins route and private Traefik mTLS backend transport; direct proxy-port access fails closed.
- **optional-vpn**: VPN enforcement applies only when enabled; unprotected download traffic requires explicit confirmation.
- **remote-managed-tunnel**: A Cloudflare connector token cannot manage Published application routes; SDBX lists and probes the required remote mappings.
- **no-controller-image**: v1 publishes native binaries only; there is no supported SDBX controller container image.

## Canonical resources

- Website: https://sdbx.one/
- Installation guide for people: https://sdbx.one/install/
- Installation guide for agents: https://sdbx.one/install.md
- Product manifest: https://sdbx.one/product-manifest.json
- Source repository: https://github.com/get-sdbx/sdbx
- Source documentation: https://github.com/get-sdbx/sdbx/tree/v1.0.0-RC1/docs