Fix test attachment failing for Apprise (#690)

fixed ignored downloads not being saved for Queue Cleaner

.github/ISSUE_TEMPLATE/1-bug.yml

@@ -6,7 +6,14 @@ body:
   - type: markdown
     attributes:
       value: |
-        Thanks for taking the time to improve cleanuperr!
+        Thanks for taking the time to improve Cleanuparr!
+  - type: checkboxes
+    id: duplicate-check
+    attributes:
+      label: "Duplicate check"
+      options:
+        - label: I have searched for existing issues and confirmed this is not a duplicate.
+          required: true
   - type: checkboxes
     id: init
     attributes:
@@ -14,7 +21,7 @@ body:
       options:
         - label: Reviewed the documentation.
           required: true
-        - label: Ensured I am using ghcr.io/flmorg/cleanuperr docker repository.
+        - label: Ensured I am using ghcr.io/cleanuparr/cleanuparr docker repository.
           required: true
         - label: Ensured I am using the latest version.
           required: true

.github/ISSUE_TEMPLATE/2-feature.yml

@@ -6,7 +6,26 @@ body:
   - type: markdown
     attributes:
       value: |
-        Thanks for taking the time to improve cleanuperr!
+        Thanks for taking the time to improve Cleanuparr!
+  - type: checkboxes
+    id: duplicate-check
+    attributes:
+      label: "Duplicate check"
+      options:
+        - label: I have searched for existing issues and confirmed this is not a duplicate.
+          required: true
+  - type: checkboxes
+    id: init
+    attributes:
+      label: Implementation & testing support
+      description: The requester should help answer questions, provide support for the implementation and test changes.
+      options:
+        - label: I understand I must be available to assist with implementation questions and to test the feature before being released.
+          required: true
+        - label: I understand that joining the Discord server may be necessary for better coordination and faster communication.
+          required: true
+        - label: I understand that failure to assist in the development process of my request will result in the request being closed.
+          required: true
   - type: textarea
     id: description
     attributes:

.github/ISSUE_TEMPLATE/3-help.yml

@@ -7,6 +7,13 @@ body:
     attributes:
       value: |
         If you are experiencing unexpected behavior, please consider submitting a bug report instead.
+  - type: checkboxes
+    id: duplicate-check
+    attributes:
+      label: "Duplicate check"
+      options:
+        - label: I have searched for existing issues and confirmed this is not a duplicate.
+          required: true
   - type: checkboxes
     id: init
     attributes:
@@ -14,7 +21,7 @@ body:
       options:
         - label: Reviewed the documentation.
           required: true
-        - label: Ensured I am using ghcr.io/flmorg/cleanuperr docker repository.
+        - label: Ensured I am using ghcr.io/cleanuparr/cleanuparr docker repository.
           required: true
         - label: Ensured I am using the latest version.
           required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,2 +1,8 @@
 blank_issues_enabled: false
-contact_links: []
+contact_links:
+  - name: Discord Community
+    url: https://discord.gg/SCtMCgtsc4
+    about: Join our Discord for real-time help and discussions
+  - name: Documentation
+    url: https://cleanuparr.github.io/Cleanuparr/
+    about: Check the documentation for configurations and usage guidelines

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,24 @@
+## Description
+<!-- Brief description of what this PR does -->
+
+## Related Issue
+Closes #ISSUE_NUMBER
+
+## Type of Change
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Breaking change
+- [ ] Documentation update
+
+## Testing
+<!-- Describe how you tested your changes -->
+
+## Screenshots (if applicable)
+<!-- Add screenshots here -->
+
+## Checklist
+- [ ] I have read the [Contributing Guide](../CONTRIBUTING.md)
+- [ ] I have announced my intent to work on this and received approval
+- [ ] My code follows the project's code standards
+- [ ] I have tested my changes thoroughly
+- [ ] I have updated relevant documentation

.github/actions/vault-secrets/action.yml

@@ -0,0 +1,30 @@
+name: 'Get Vault Secrets'
+description: 'Retrieves secrets from HashiCorp Vault using AppRole authentication'
+inputs:
+  vault_host:
+    description: 'Vault server URL'
+    required: true
+  vault_role_id:
+    description: 'Vault AppRole Role ID'
+    required: true
+  vault_secret_id:
+    description: 'Vault AppRole Secret ID'
+    required: true
+  secrets:
+    description: 'Secrets to retrieve (multiline string, one per line in format: path | output_name)'
+    required: true
+    default: |
+      secrets/data/github repo_readonly_pat | REPO_READONLY_PAT
+      secrets/data/github packages_pat | PACKAGES_PAT
+
+runs:
+  using: "composite"
+  steps:
+    - name: Get vault secrets
+      uses: hashicorp/vault-action@v4
+      with:
+        url: ${{ inputs.vault_host }}
+        method: approle
+        roleId: ${{ inputs.vault_role_id }}
+        secretId: ${{ inputs.vault_secret_id }}
+        secrets: ${{ inputs.secrets }}

.github/release.yml

@@ -0,0 +1,25 @@
+changelog:
+  exclude:
+    labels:
+      - duplicate
+      - invalid
+      - wontfix
+  categories:
+    - title: Breaking Changes
+      labels:
+        - breaking
+    - title: Features
+      labels:
+        - enhancement
+    - title: Bug Fixes
+      labels:
+        - bug
+    - title: Documentation
+      labels:
+        - documentation
+    - title: Maintenance
+      labels:
+        - chore
+    - title: Other Changes
+      labels:
+        - "*"

.github/workflows/build-docker.yml

@@ -0,0 +1,271 @@
+name: Build Docker Images
+
+on:
+  pull_request:
+    paths:
+      - 'code/**'
+  workflow_call:
+    inputs:
+      push_docker:
+        description: 'Push Docker image to registry'
+        type: boolean
+        required: false
+        default: true
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+
+# Cancel in-progress runs for the same PR
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  packages: write
+
+env:
+  REGISTRY_IMAGE: ghcr.io/cleanuparr/cleanuparr
+
+jobs:
+  # Compute tags, version, and push decision for downstream jobs
+  prepare:
+    runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+    outputs:
+      tags: ${{ steps.build-info.outputs.tags }}
+      version: ${{ steps.build-info.outputs.version }}
+      version_docker_tag: ${{ steps.build-info.outputs.version_docker_tag }}
+      branch: ${{ steps.build-info.outputs.branch }}
+      push: ${{ steps.build-info.outputs.push }}
+      github_sha: ${{ github.sha }}
+    steps:
+      - name: Initialize build info
+        id: build-info
+        timeout-minutes: 1
+        run: |
+          githubHeadRef="${{ github.head_ref }}"
+          githubRef="${{ github.ref }}"
+          inputVersion="${{ inputs.app_version }}"
+          latestDockerTag=""
+          versionDockerTag=""
+          majorVersionDockerTag=""
+          minorVersionDockerTag=""
+          version="0.0.1"
+
+          if [[ -n "$inputVersion" ]]; then
+            # Version provided via input (manual release)
+            branch="main"
+            latestDockerTag="latest"
+            versionDockerTag="$inputVersion"
+            version="$inputVersion"
+
+            # Extract major and minor versions for additional tags
+            if [[ "$versionDockerTag" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+) ]]; then
+              majorVersionDockerTag="${BASH_REMATCH[1]}"
+              minorVersionDockerTag="${BASH_REMATCH[1]}.${BASH_REMATCH[2]}"
+            fi
+          elif [[ "$githubRef" =~ ^"refs/tags/" ]]; then
+            # Tag push
+            branch=${githubRef##*/}
+            latestDockerTag="latest"
+            versionDockerTag=${branch#v}
+            version=${branch#v}
+
+            # Extract major and minor versions for additional tags
+            if [[ "$versionDockerTag" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+) ]]; then
+              majorVersionDockerTag="${BASH_REMATCH[1]}"
+              minorVersionDockerTag="${BASH_REMATCH[1]}.${BASH_REMATCH[2]}"
+            fi
+          else
+            if [[ -z "$githubHeadRef" ]]; then
+              # Main branch
+              branch=${githubRef##*/}
+              versionDockerTag="$branch"
+            else
+              # Pull request
+              branch=$githubHeadRef
+              versionDockerTag="$branch"
+            fi
+          fi
+
+          githubTags=""
+          if [ -n "$latestDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$latestDockerTag"
+          fi
+          if [ -n "$versionDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$versionDockerTag"
+          fi
+          if [ -n "$minorVersionDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$minorVersionDockerTag"
+          fi
+          if [ -n "$majorVersionDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$majorVersionDockerTag"
+          fi
+
+          githubTags="${githubTags#,}"
+
+          # Determine push decision
+          push="${{ github.event_name == 'pull_request' || inputs.push_docker == true }}"
+
+          echo "tags=$githubTags" >> $GITHUB_OUTPUT
+          echo "version=$version" >> $GITHUB_OUTPUT
+          echo "version_docker_tag=$versionDockerTag" >> $GITHUB_OUTPUT
+          echo "branch=$branch" >> $GITHUB_OUTPUT
+          echo "push=$push" >> $GITHUB_OUTPUT
+
+  # Build each platform in parallel
+  build:
+    runs-on: ubuntu-latest
+    needs: [prepare]
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - linux/amd64
+          - linux/arm64
+    steps:
+      - name: Prepare platform pair
+        run: |
+          platform=${{ matrix.platform }}
+          echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout target repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          repository: ${{ github.repository }}
+          ref: ${{ needs.prepare.outputs.branch }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+        timeout-minutes: 5
+
+      - name: Login to GitHub Container Registry
+        if: needs.prepare.outputs.push == 'true'
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push by digest
+        if: needs.prepare.outputs.push == 'true'
+        id: build-push
+        timeout-minutes: 30
+        uses: docker/build-push-action@v7
+        with:
+          context: ${{ github.workspace }}/code
+          file: ${{ github.workspace }}/code/Dockerfile
+          provenance: false
+          labels: |
+            commit=sha-${{ needs.prepare.outputs.github_sha }}
+            version=${{ needs.prepare.outputs.version_docker_tag }}
+          build-args: |
+            VERSION=${{ needs.prepare.outputs.version }}
+            PACKAGES_USERNAME=${{ secrets.PACKAGES_USERNAME }}
+            PACKAGES_PAT=${{ env.PACKAGES_PAT }}
+          platforms: ${{ matrix.platform }}
+          outputs: type=image,"name=${{ env.REGISTRY_IMAGE }}",push-by-digest=true,name-canonical=true,push=true
+          cache-from: type=gha,scope=build-${{ env.PLATFORM_PAIR }}
+          cache-to: type=gha,scope=build-${{ env.PLATFORM_PAIR }},mode=max
+
+      - name: Build (no push)
+        if: needs.prepare.outputs.push != 'true'
+        timeout-minutes: 30
+        uses: docker/build-push-action@v7
+        with:
+          context: ${{ github.workspace }}/code
+          file: ${{ github.workspace }}/code/Dockerfile
+          provenance: false
+          labels: |
+            commit=sha-${{ needs.prepare.outputs.github_sha }}
+            version=${{ needs.prepare.outputs.version_docker_tag }}
+          build-args: |
+            VERSION=${{ needs.prepare.outputs.version }}
+            PACKAGES_USERNAME=${{ secrets.PACKAGES_USERNAME }}
+            PACKAGES_PAT=${{ env.PACKAGES_PAT }}
+          platforms: ${{ matrix.platform }}
+          push: false
+          cache-from: type=gha,scope=build-${{ env.PLATFORM_PAIR }}
+          cache-to: type=gha,scope=build-${{ env.PLATFORM_PAIR }},mode=max
+
+      - name: Export digest
+        if: needs.prepare.outputs.push == 'true'
+        run: |
+          mkdir -p ${{ runner.temp }}/digests
+          digest="${{ steps.build-push.outputs.digest }}"
+          touch "${{ runner.temp }}/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        if: needs.prepare.outputs.push == 'true'
+        uses: actions/upload-artifact@v7
+        with:
+          name: digests-${{ env.PLATFORM_PAIR }}
+          path: ${{ runner.temp }}/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  # Create multi-platform manifest and push with final tags
+  merge:
+    runs-on: ubuntu-latest
+    needs: [prepare, build]
+    if: needs.prepare.outputs.push == 'true'
+    steps:
+      - name: Download digests
+        uses: actions/download-artifact@v8
+        with:
+          path: ${{ runner.temp }}/digests
+          pattern: digests-*
+          merge-multiple: true
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create manifest list and push
+        timeout-minutes: 5
+        working-directory: ${{ runner.temp }}/digests
+        run: |
+          tags="${{ needs.prepare.outputs.tags }}"
+          tag_args=""
+          IFS=',' read -ra TAG_ARRAY <<< "$tags"
+          for tag in "${TAG_ARRAY[@]}"; do
+            tag=$(echo "$tag" | xargs)
+            if [ -n "$tag" ]; then
+              tag_args="$tag_args -t $tag"
+            fi
+          done
+
+          docker buildx imagetools create $tag_args \
+            $(printf '${{ env.REGISTRY_IMAGE }}@sha256:%s ' *)
+
+      - name: Inspect image
+        run: |
+          tags="${{ needs.prepare.outputs.tags }}"
+          first_tag=$(echo "$tags" | tr ',' '\n' | grep -v '^$' | head -1 | xargs)
+          docker buildx imagetools inspect "$first_tag"

.github/workflows/build-executable.yml

@@ -0,0 +1,135 @@
+name: Build Executables
+
+on:
+  workflow_call:
+    inputs:
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to github.ref_name.'
+        type: string
+        required: false
+        default: ''
+      platforms:
+        description: 'JSON array of runtime/platform pairs to build. Defaults to all platforms.'
+        type: string
+        required: false
+        default: >-
+          [{"runtime":"win-x64","platform":"win-amd64"},
+           {"runtime":"linux-x64","platform":"linux-amd64"},
+           {"runtime":"linux-arm64","platform":"linux-arm64"},
+           {"runtime":"osx-x64","platform":"osx-amd64"},
+           {"runtime":"osx-arm64","platform":"osx-arm64"}]
+
+permissions:
+  contents: read
+
+jobs:
+  # Build for each platform in parallel using matrix strategy
+  build-platform:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+      matrix:
+        include: ${{ fromJSON(inputs.platforms) }}
+
+    steps:
+      - name: Set variables
+        run: |
+          ref=${{ github.ref }}
+
+          # Use input version if provided, otherwise determine from ref
+          if [[ -n "${{ inputs.app_version }}" ]]; then
+            appVersion="${{ inputs.app_version }}"
+            releaseVersion="v$appVersion"
+          elif [[ "$ref" =~ ^refs/tags/ ]]; then
+            releaseVersion=${ref##refs/tags/}
+            appVersion=${releaseVersion#v}
+          else
+            releaseVersion="dev-$(date +%Y%m%d-%H%M%S)"
+            appVersion="0.0.1-dev"
+          fi
+
+          repoFullName=${{ github.repository }}
+          repositoryName=${repoFullName#*/}
+
+          echo "githubRepository=${{ github.repository }}" >> $GITHUB_ENV
+          echo "githubRepositoryName=$repositoryName" >> $GITHUB_ENV
+          echo "releaseVersion=$releaseVersion" >> $GITHUB_ENV
+          echo "appVersion=$appVersion" >> $GITHUB_ENV
+          echo "executableName=Cleanuparr.Api" >> $GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout target repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          repository: ${{ env.githubRepository }}
+          ref: ${{ inputs.ref || github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Setup dotnet
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v6
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json', '**/*.csproj') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Download frontend artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+
+      - name: Install dependencies and restore
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj
+
+      - name: Copy frontend to backend wwwroot
+        run: |
+          mkdir -p code/backend/${{ env.executableName }}/wwwroot
+          cp -r code/frontend/dist/ui/browser/* code/backend/${{ env.executableName }}/wwwroot/
+
+      - name: Build ${{ matrix.platform }}
+        run: |
+          dotnet publish code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj \
+            -c Release \
+            --runtime ${{ matrix.runtime }} \
+            --self-contained \
+            -o artifacts/${{ env.githubRepositoryName }}-${{ env.appVersion }}-${{ matrix.platform }} \
+            /p:PublishSingleFile=true \
+            /p:Version=${{ env.appVersion }} \
+            /p:DebugSymbols=false
+
+      - name: Zip artifact
+        run: |
+          cd ./artifacts
+          zip -r ./${{ env.githubRepositoryName }}-${{ env.appVersion }}-${{ matrix.platform }}.zip ./${{ env.githubRepositoryName }}-${{ env.appVersion }}-${{ matrix.platform }}/
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: executable-${{ matrix.platform }}
+          path: ./artifacts/*.zip
+          retention-days: 30

.github/workflows/build-frontend.yml

@@ -0,0 +1,56 @@
+name: Build Frontend
+
+on:
+  workflow_call:
+    inputs:
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to github.ref_name.'
+        type: string
+        required: false
+        default: ''
+
+permissions:
+  contents: read
+
+jobs:
+  build-frontend:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT
+
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          repository: ${{ github.repository }}
+          ref: ${{ inputs.ref || github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: '26'
+          cache: 'npm'
+          cache-dependency-path: code/frontend/package-lock.json
+
+      - name: Build frontend
+        run: |
+          cd code/frontend
+          npm ci
+          npm run build
+
+      - name: Upload frontend artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+          retention-days: 1

.github/workflows/build-macos-installer.yml

@@ -0,0 +1,377 @@
+name: Build macOS Installers
+
+permissions:
+  contents: read
+
+on:
+  workflow_call:
+    inputs:
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+
+jobs:
+  build-macos-installer:
+    name: Build macOS ${{ matrix.arch }} Installer
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: Intel
+            runner: macos-15-intel
+            runtime: osx-x64
+            min_os_version: "10.15"
+            artifact_suffix: intel
+          - arch: ARM
+            runner: macos-15
+            runtime: osx-arm64
+            min_os_version: "11.0"
+            artifact_suffix: arm64
+
+    steps:
+      - name: Set variables
+        run: |
+          repoFullName=${{ github.repository }}
+          ref=${{ github.ref }}
+
+          # Use input version if provided, otherwise determine from ref
+          if [[ -n "${{ inputs.app_version }}" ]]; then
+            appVersion="${{ inputs.app_version }}"
+            releaseVersion="v$appVersion"
+          elif [[ "$ref" =~ ^refs/tags/ ]]; then
+            releaseVersion=${ref##refs/tags/}
+            appVersion=${releaseVersion#v}
+          else
+            # For manual dispatch, use a default version
+            releaseVersion="dev-$(date +%Y%m%d-%H%M%S)"
+            appVersion="0.0.1-dev"
+          fi
+
+          repositoryName=${repoFullName#*/}
+
+          echo "githubRepository=${{ github.repository }}" >> $GITHUB_ENV
+          echo "githubRepositoryName=$repositoryName" >> $GITHUB_ENV
+          echo "releaseVersion=$releaseVersion" >> $GITHUB_ENV
+          echo "appVersion=$appVersion" >> $GITHUB_ENV
+          echo "executableName=Cleanuparr.Api" >> $GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ env.githubRepository }}
+          ref: ${{ github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Download frontend artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Restore .NET dependencies
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj
+
+      - name: Build macOS ${{ matrix.arch }} executable
+        run: |
+          # Clean any existing output directory
+          rm -rf dist
+          mkdir -p dist/temp
+
+          # Build to a temporary location
+          dotnet publish code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj \
+            -c Release \
+            --runtime ${{ matrix.runtime }} \
+            --self-contained true \
+            -o dist/temp \
+            /p:PublishSingleFile=true \
+            /p:Version=${{ env.appVersion }} \
+            /p:DebugType=None \
+            /p:DebugSymbols=false \
+            /p:UseAppHost=true \
+            /p:EnableMacOSCodeSign=false \
+            /p:CodeSignOnCopy=false \
+            /p:_CodeSignDuringBuild=false \
+            /p:PublishTrimmed=false \
+            /p:TrimMode=link
+
+          # Create proper app bundle structure
+          mkdir -p dist/Cleanuparr.app/Contents/MacOS
+
+          # Copy the built executable (note: AssemblyName is "Cleanuparr" not "Cleanuparr.Api")
+          cp dist/temp/Cleanuparr dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+
+          # Copy frontend directly to where it belongs in the app bundle
+          mkdir -p dist/Cleanuparr.app/Contents/MacOS/wwwroot
+          cp -r code/frontend/dist/ui/browser/* dist/Cleanuparr.app/Contents/MacOS/wwwroot/
+
+          # Copy any additional runtime files if they exist
+          if [ -d "dist/temp" ]; then
+            find dist/temp -name "*.dylib" -exec cp {} dist/Cleanuparr.app/Contents/MacOS/ \; 2>/dev/null || true
+            find dist/temp -name "createdump" -exec cp {} dist/Cleanuparr.app/Contents/MacOS/ \; 2>/dev/null || true
+          fi
+
+      - name: Post-build setup
+        run: |
+          # Make sure the executable is actually executable
+          chmod +x dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+
+          # Remove any .pdb files that might have been created
+          find dist/Cleanuparr.app/Contents/MacOS -name "*.pdb" -delete 2>/dev/null || true
+
+          echo "Checking architecture of built binary:"
+          file dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+          if command -v lipo >/dev/null 2>&1; then
+            lipo -info dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+          fi
+
+          echo "Files in MacOS directory:"
+          ls -la dist/Cleanuparr.app/Contents/MacOS/
+
+      - name: Create macOS app bundle structure
+        run: |
+          # Create proper app bundle structure
+          mkdir -p dist/Cleanuparr.app/Contents/{MacOS,Resources,Frameworks}
+
+          # Convert ICO to ICNS for macOS app bundle
+          if command -v iconutil >/dev/null 2>&1; then
+            # Create iconset directory structure
+            mkdir -p Cleanuparr.iconset
+
+            # Use existing PNG files from Logo directory for different sizes
+            cp Logo/16.png Cleanuparr.iconset/icon_16x16.png
+            cp Logo/32.png Cleanuparr.iconset/icon_16x16@2x.png
+            cp Logo/32.png Cleanuparr.iconset/icon_32x32.png
+            cp Logo/64.png Cleanuparr.iconset/icon_32x32@2x.png
+            cp Logo/128.png Cleanuparr.iconset/icon_128x128.png
+            cp Logo/256.png Cleanuparr.iconset/icon_128x128@2x.png
+            cp Logo/256.png Cleanuparr.iconset/icon_256x256.png
+            cp Logo/512.png Cleanuparr.iconset/icon_256x256@2x.png
+            cp Logo/512.png Cleanuparr.iconset/icon_512x512.png
+            cp Logo/1024.png Cleanuparr.iconset/icon_512x512@2x.png
+
+            # Create ICNS file
+            iconutil -c icns Cleanuparr.iconset -o dist/Cleanuparr.app/Contents/Resources/Cleanuparr.icns
+
+            # Clean up iconset directory
+            rm -rf Cleanuparr.iconset
+          fi
+
+          # Create Launch Daemon plist
+          cat > dist/Cleanuparr.app/Contents/Resources/com.cleanuparr.daemon.plist << EOF
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+              <key>Label</key>
+              <string>com.cleanuparr.daemon</string>
+              <key>ProgramArguments</key>
+              <array>
+                  <string>/Applications/Cleanuparr.app/Contents/MacOS/Cleanuparr</string>
+              </array>
+              <key>RunAtLoad</key>
+              <true/>
+              <key>KeepAlive</key>
+              <true/>
+              <key>StandardOutPath</key>
+              <string>/var/log/cleanuparr.log</string>
+              <key>StandardErrorPath</key>
+              <string>/var/log/cleanuparr.error.log</string>
+              <key>WorkingDirectory</key>
+              <string>/Applications/Cleanuparr.app/Contents/MacOS</string>
+              <key>EnvironmentVariables</key>
+              <dict>
+                  <key>HTTP_PORTS</key>
+                  <string>11011</string>
+              </dict>
+          </dict>
+          </plist>
+          EOF
+
+          # Create Info.plist with proper configuration
+          cat > dist/Cleanuparr.app/Contents/Info.plist << EOF
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+              <key>CFBundleExecutable</key>
+              <string>Cleanuparr</string>
+              <key>CFBundleIdentifier</key>
+              <string>com.Cleanuparr</string>
+              <key>CFBundleName</key>
+              <string>Cleanuparr</string>
+              <key>CFBundleDisplayName</key>
+              <string>Cleanuparr</string>
+              <key>CFBundleVersion</key>
+              <string>${{ env.appVersion }}</string>
+              <key>CFBundleShortVersionString</key>
+              <string>${{ env.appVersion }}</string>
+              <key>CFBundleInfoDictionaryVersion</key>
+              <string>6.0</string>
+              <key>CFBundlePackageType</key>
+              <string>APPL</string>
+              <key>CFBundleSignature</key>
+              <string>CLNR</string>
+              <key>CFBundleIconFile</key>
+              <string>Cleanuparr</string>
+              <key>NSHighResolutionCapable</key>
+              <true/>
+              <key>NSRequiresAquaSystemAppearance</key>
+              <false/>
+              <key>LSMinimumSystemVersion</key>
+              <string>${{ matrix.min_os_version }}</string>
+              <key>LSApplicationCategoryType</key>
+              <string>public.app-category.productivity</string>
+              <key>NSSupportsAutomaticTermination</key>
+              <false/>
+              <key>NSSupportsSuddenTermination</key>
+              <false/>
+              <key>LSBackgroundOnly</key>
+              <false/>
+              <key>NSAppTransportSecurity</key>
+              <dict>
+                  <key>NSAllowsArbitraryLoads</key>
+                  <true/>
+              </dict>
+          </dict>
+          </plist>
+          EOF
+
+          # Clean up temp directory
+          rm -rf dist/temp
+
+      - name: Create PKG installer
+        run: |
+          # Create preinstall script to handle existing installations
+          mkdir -p scripts
+          cat > scripts/preinstall << 'EOF'
+          #!/bin/bash
+
+          # Stop and unload existing launch daemon if it exists
+          if launchctl list | grep -q "com.cleanuparr.daemon"; then
+            launchctl stop com.cleanuparr.daemon 2>/dev/null || true
+            launchctl unload /Library/LaunchDaemons/com.cleanuparr.daemon.plist 2>/dev/null || true
+          fi
+
+          # Stop any running instances of Cleanuparr
+          pkill -f "Cleanuparr" || true
+          sleep 2
+
+          # Remove old installation if it exists
+          if [[ -d "/Applications/Cleanuparr.app" ]]; then
+            rm -rf "/Applications/Cleanuparr.app"
+          fi
+
+          # Remove old launch daemon plist if it exists
+          if [[ -f "/Library/LaunchDaemons/com.cleanuparr.daemon.plist" ]]; then
+            rm -f "/Library/LaunchDaemons/com.cleanuparr.daemon.plist"
+          fi
+
+          exit 0
+          EOF
+
+          chmod +x scripts/preinstall
+
+          # Create postinstall script
+          cat > scripts/postinstall << 'EOF'
+          #!/bin/bash
+
+          # Set proper permissions for the app bundle
+          chmod -R 755 /Applications/Cleanuparr.app
+          chmod +x /Applications/Cleanuparr.app/Contents/MacOS/Cleanuparr
+
+          # Install the launch daemon
+          cp /Applications/Cleanuparr.app/Contents/Resources/com.cleanuparr.daemon.plist /Library/LaunchDaemons/
+          chown root:wheel /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+          chmod 644 /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+
+          # Load and start the service
+          launchctl load /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+          launchctl start com.cleanuparr.daemon
+
+          # Wait a moment for service to start
+          sleep 3
+
+          # Display as system notification
+          osascript -e 'display notification "Cleanuparr service started! Visit http://localhost:11011 in your browser." with title "Installation Complete"' 2>/dev/null || true
+
+          exit 0
+          EOF
+
+          chmod +x scripts/postinstall
+
+          # Create uninstall script (optional, for user reference)
+          cat > scripts/uninstall_cleanuparr.sh << 'EOF'
+          #!/bin/bash
+          # Cleanuparr Uninstall Script
+          # Run this script with sudo to completely remove Cleanuparr
+
+          echo "Stopping Cleanuparr service..."
+          launchctl stop com.cleanuparr.daemon 2>/dev/null || true
+          launchctl unload /Library/LaunchDaemons/com.cleanuparr.daemon.plist 2>/dev/null || true
+
+          echo "Removing service files..."
+          rm -f /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+
+          echo "Removing application..."
+          rm -rf /Applications/Cleanuparr.app
+
+          echo "Removing logs..."
+          rm -f /var/log/cleanuparr.log
+          rm -f /var/log/cleanuparr.error.log
+
+          echo "Cleanuparr has been completely removed."
+          echo "Note: Configuration files in /Applications/Cleanuparr.app/Contents/MacOS/config/ have been removed with the app."
+          EOF
+
+          chmod +x scripts/uninstall_cleanuparr.sh
+
+          # Copy uninstall script to app bundle for user access
+          cp scripts/uninstall_cleanuparr.sh dist/Cleanuparr.app/Contents/Resources/
+
+          # Determine package name - if app_version input was provided, it's a release build
+          if [[ -n "${{ inputs.app_version }}" ]] || [[ "${{ github.ref }}" =~ ^refs/tags/ ]]; then
+            pkg_name="Cleanuparr-${{ env.appVersion }}-macos-${{ matrix.artifact_suffix }}.pkg"
+          else
+            pkg_name="Cleanuparr-${{ env.appVersion }}-macos-${{ matrix.artifact_suffix }}-dev.pkg"
+          fi
+
+          # Create PKG installer with better metadata
+          pkgbuild --root dist/ \
+                  --scripts scripts/ \
+                  --identifier com.Cleanuparr \
+                  --version ${{ env.appVersion }} \
+                  --install-location /Applications \
+                  --ownership preserve \
+                  ${pkg_name}
+
+          echo "pkgName=${pkg_name}" >> $GITHUB_ENV
+
+      - name: Upload installer as artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: Cleanuparr-macos-${{ matrix.artifact_suffix }}-installer
+          path: '${{ env.pkgName }}'
+          retention-days: 30

.github/workflows/build-windows-installer.yml

@@ -0,0 +1,149 @@
+name: Build Windows Installer
+
+on:
+  workflow_call:
+    inputs:
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to github.ref_name.'
+        type: string
+        required: false
+        default: ''
+
+permissions:
+  contents: read
+
+jobs:
+  build-windows-installer:
+    runs-on: windows-latest
+    
+    steps:
+      - name: Set variables
+        shell: pwsh
+        run: |
+          $repoFullName = "${{ github.repository }}"
+          $ref = "${{ github.ref }}"
+          $inputVersion = "${{ inputs.app_version }}"
+
+          # Use input version if provided, otherwise determine from ref
+          if ($inputVersion -ne "") {
+            $appVersion = $inputVersion
+            $releaseVersion = "v$appVersion"
+          } elseif ($ref -match "^refs/tags/") {
+            $releaseVersion = $ref -replace "refs/tags/", ""
+            $appVersion = $releaseVersion -replace "^v", ""
+          } else {
+            # For manual dispatch, use a default version
+            $releaseVersion = "dev-$(Get-Date -Format 'yyyyMMdd-HHmmss')"
+            $appVersion = "0.0.1-dev"
+          }
+
+          $repositoryName = $repoFullName.Split("/")[1]
+
+          echo "githubRepository=${{ github.repository }}" >> $env:GITHUB_ENV
+          echo "githubRepositoryName=$repositoryName" >> $env:GITHUB_ENV
+          echo "releaseVersion=$releaseVersion" >> $env:GITHUB_ENV
+          echo "appVersion=$appVersion" >> $env:GITHUB_ENV
+          echo "APP_VERSION=$appVersion" >> $env:GITHUB_ENV
+          echo "executableName=Cleanuparr.Api" >> $env:GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ env.githubRepository }}
+          ref: ${{ inputs.ref || github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Download frontend artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Restore .NET dependencies
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj
+
+      - name: Copy frontend to backend wwwroot
+        shell: pwsh
+        run: |
+          New-Item -ItemType Directory -Force -Path "code/backend/${{ env.executableName }}/wwwroot"
+          Copy-Item -Path "code/frontend/dist/ui/browser/*" -Destination "code/backend/${{ env.executableName }}/wwwroot/" -Recurse -Force
+
+      - name: Build Windows executable
+        run: |
+          dotnet publish code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj -c Release --runtime win-x64 --self-contained -o dist /p:PublishSingleFile=true /p:Version=${{ env.appVersion }} /p:DebugType=None /p:DebugSymbols=false
+
+      - name: Setup Inno Setup
+        shell: pwsh
+        run: |
+          choco install innosetup --no-progress -y
+          $innoPath = "C:\Program Files (x86)\Inno Setup 6"
+          echo "$innoPath" >> $env:GITHUB_PATH
+
+      - name: Verify LICENSE file exists
+        shell: pwsh
+        run: |
+          if (-not (Test-Path "LICENSE")) {
+            Write-Error "LICENSE file not found in repository root"
+            exit 1
+          }
+          Write-Host "LICENSE file found successfully"
+
+      - name: Build Windows installer
+        shell: pwsh
+        run: |
+          # Copy installer script to root
+          Copy-Item "installers/windows/cleanuparr-installer.iss" -Destination "cleanuparr-installer.iss"
+          
+          # The installer script has been pre-updated with proper icon and config paths
+          # No dynamic modifications needed as the base script now includes correct references
+          
+          # Run Inno Setup compiler
+          & "C:\Program Files (x86)\Inno Setup 6\ISCC.exe" "cleanuparr-installer.iss"
+          
+          # Check if installer was created
+          if (Test-Path "installer/Cleanuparr_Setup.exe") {
+            Write-Host "Installer created successfully"
+          } else {
+            Write-Error "Installer creation failed"
+            exit 1
+          }
+
+      - name: Rename installer with version
+        shell: pwsh
+        run: |
+          $installerName = "Cleanuparr-${{ env.appVersion }}-Setup.exe"
+          Move-Item "installer/Cleanuparr_Setup.exe" "installer/$installerName"
+          echo "installerName=$installerName" >> $env:GITHUB_ENV
+
+      - name: Upload installer artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: Cleanuparr-windows-installer
+          path: installer/${{ env.installerName }}
+          retention-days: 30
+
+      # Removed individual release step - handled by main release workflow 

.github/workflows/build.yml

@@ -1,14 +0,0 @@
-on:
-  workflow_dispatch:
-  workflow_call:
-
-jobs:
-  build:
-    uses: flmorg/universal-workflows-testing/.github/workflows/dotnet.build.app.yml@main
-    with:
-      dockerRepository: flaminel/cleanuperr
-      githubContext: ${{ toJSON(github) }}
-      outputName: cleanuperr
-      selfContained: false
-      baseImage: 9.0-bookworm-slim
-    secrets: inherit

.github/workflows/cloudflare-pages-blocklists.yml

@@ -0,0 +1,46 @@
+name: Deploy to Cloudflare Pages
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'Cloudflare/**'
+      - 'blacklist'
+      - 'blacklist_permissive'
+      - 'whitelist'
+      - 'whitelist_with_subtitles'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy to Cloudflare Pages
+    
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Create directory for static files
+        run: |
+          mkdir -p Cloudflare/static
+      
+      - name: Copy root static files to Cloudflare static directory
+        run: |
+          cp blacklist Cloudflare/static/
+          cp blacklist_permissive Cloudflare/static/
+          cp whitelist Cloudflare/static/
+          cp whitelist_with_subtitles Cloudflare/static/
+      
+      - name: Deploy to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          workingDirectory: "Cloudflare"
+          command: pages deploy . --project-name=cleanuparr

.github/workflows/cloudflare-pages-status.yml

@@ -0,0 +1,43 @@
+name: Deploy Status Page to Cloudflare Pages
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        description: 'Release version (e.g. v1.2.3)'
+        type: string
+        required: true
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Release version (e.g. v1.2.3)'
+        type: string
+        required: true
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy Status Page to Cloudflare Pages
+    
+    steps:
+      - name: Create status files
+        run: |
+          mkdir -p status
+          echo "{ \"version\": \"${{ inputs.version }}\" }" > status/status.json
+
+          # Cache static files for 10 minutes
+          cat > status/_headers << 'EOF'
+          /*
+            Cache-Control: public, max-age=600, s-maxage=600
+          EOF
+      
+      - name: Deploy to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          workingDirectory: "status"
+          command: pages deploy . --project-name=cleanuparr-status

.github/workflows/dependency-review.yml

@@ -0,0 +1,47 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches:
+      - main
+
+# Cancel in-progress runs for the same PR
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v5
+        with:
+          # Fail on critical and high severity vulnerabilities
+          fail-on-severity: high
+          # Warn on moderate vulnerabilities
+          warn-on-severity: moderate
+          # Allow licenses
+          # allow-licenses: MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD
+          # Comment summarizes the vulnerabilities found
+          comment-summary-in-pr: on-failure
+          # Show dependency changes in PR
+          show-openssf-scorecard: true
+          vulnerability-check: true
+
+      - name: Upload dependency review results
+        uses: actions/upload-artifact@v7
+        with:
+          name: dependency-review-results
+          path: dependency-review-*.json
+          if-no-files-found: ignore
+          retention-days: 30

.github/workflows/deploy.yml

@@ -1,19 +0,0 @@
-on:
-  workflow_call:
-  workflow_dispatch:
-  push:
-    paths:
-      - 'chart/**'
-    branches: [ main ]
-
-jobs:
-  deploy:
-    uses: flmorg/universal-workflows/.github/workflows/chart.install.yml@main
-    with:
-      githubContext: ${{ toJSON(github) }}
-      chartRepo: oci://ghcr.io/flmorg
-      chartName: universal-chart
-      version: ^1.0.0
-      valuesPath: chart/values.yaml
-      releaseName: main
-    secrets: inherit

.github/workflows/docs-preview-cleanup.yml

@@ -0,0 +1,63 @@
+name: Docs Preview Cleanup
+
+on:
+  pull_request:
+    types: [closed]
+    paths:
+      - 'docs/**'
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        description: 'PR number whose preview deployments to delete'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  cleanup:
+    runs-on: ubuntu-latest
+    # Skip fork PRs
+    if: github.event_name == 'workflow_dispatch' || github.event.pull_request.head.repo.full_name == github.repository
+    env:
+      CF_API_TOKEN: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+      CF_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+      PROJECT: cleanuparr-docs
+      BRANCH: pull-${{ github.event.pull_request.number || inputs.pr_number }}
+    steps:
+      - name: Delete preview deployments for this PR
+        run: |
+          set -euo pipefail
+          api="https://api.cloudflare.com/client/v4"
+          auth="Authorization: Bearer $CF_API_TOKEN"
+
+          if [ -z "${CF_ACCOUNT_ID:-}" ]; then
+            echo "CLOUDFLARE_ACCOUNT_ID repo variable is not set" >&2
+            exit 1
+          fi
+          echo "Account $CF_ACCOUNT_ID, tearing down branch $BRANCH"
+
+          ids=""
+          page=1
+          while :; do
+            resp=$(curl -fsS -H "$auth" \
+              "$api/accounts/$CF_ACCOUNT_ID/pages/projects/$PROJECT/deployments?page=$page&per_page=25")
+            count=$(echo "$resp" | jq '.result | length')
+            [ "$count" -eq 0 ] && break
+
+            page_ids=$(echo "$resp" | jq -r --arg b "$BRANCH" \
+              '.result[] | select(.deployment_trigger.metadata.branch == $b) | .id')
+            ids="$ids $page_ids"
+            page=$((page + 1))
+          done
+
+          deleted=0
+          for id in $ids; do
+            echo "Deleting deployment $id"
+            curl -fsS -X DELETE -H "$auth" \
+              "$api/accounts/$CF_ACCOUNT_ID/pages/projects/$PROJECT/deployments/$id?force=true" >/dev/null
+            deleted=$((deleted + 1))
+          done
+
+          echo "Deleted $deleted deployment(s) for $BRANCH"

.github/workflows/docs-preview.yml

@@ -0,0 +1,85 @@
+name: Docs Preview
+
+on:
+  pull_request:
+    paths:
+      - 'docs/**'
+
+concurrency:
+  group: docs-preview-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  preview:
+    runs-on: ubuntu-latest
+    # Skip fork PRs
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 26.x
+          cache: yarn
+          cache-dependency-path: docs/yarn.lock
+
+      - name: Install dependencies
+        working-directory: docs
+        run: yarn install --frozen-lockfile
+
+      - name: Build Docusaurus
+        working-directory: docs
+        run: yarn build
+
+      - name: Deploy preview to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          workingDirectory: docs
+          command: pages deploy build --project-name=cleanuparr-docs --branch=pull-${{ github.event.pull_request.number }}
+
+      - name: Comment preview URL
+        uses: actions/github-script@v9
+        with:
+          script: |
+            const url = `https://pull-${context.issue.number}.cleanuparr-docs.pages.dev`;
+            const marker = '<!-- docs-preview -->';
+            const body = [
+              marker,
+              `Docs preview for \`${context.payload.pull_request.head.ref}\` (\`${context.payload.pull_request.head.sha.substring(0, 7)}\`):`,
+              ``,
+              `${url}/docs`
+            ].join('\n');
+
+            const comments = await github.paginate(github.rest.issues.listComments, {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              per_page: 100
+            });
+            const existing = comments.find(c => c.body.includes(marker));
+
+            if (existing) {
+              await github.rest.issues.updateComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: existing.id,
+                body
+              });
+            } else {
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                body
+              });
+            }

.github/workflows/docs.yml

@@ -1,10 +1,8 @@
 name: Deploy Docusaurus to GitHub Pages
 
 on:
-  push:
-    branches: [main]
-    paths:
-      - 'docs/**'
+  workflow_call: {}
+  workflow_dispatch: {}
 
 permissions:
   contents: read
@@ -12,21 +10,20 @@ permissions:
   id-token: write
 
 jobs:
-  deploy:
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
+  publish:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
+          ref: main
+          persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
-          node-version: 20.x
+          node-version: 26.x
           cache: yarn
           cache-dependency-path: docs/yarn.lock
 
@@ -38,12 +35,39 @@ jobs:
         working-directory: docs
         run: yarn build
 
-      - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+      - name: Publish to org site
+        uses: peaceiris/actions-gh-pages@v4
         with:
-          path: docs/build
+          personal_token: ${{ secrets.DOCS_DEPLOY_TOKEN }}
+          external_repository: Cleanuparr/Cleanuparr.github.io
+          publish_branch: gh-pages
+          publish_dir: docs/build
+
+  redirect:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Build redirect stub
+        run: |
+          mkdir redirect
+          cat > redirect/404.html <<'EOF'
+          <!doctype html>
+          <meta http-equiv="refresh" content="0;url=https://cleanuparr.github.io/docs">
+          <script>
+            var p = location.pathname.replace(/^\/Cleanuparr/, '');
+            location.replace('https://cleanuparr.github.io' + p + location.search + location.hash);
+          </script>
+          EOF
+          cp redirect/404.html redirect/index.html
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: redirect
           retention-days: 1
 
-      - name: Deploy to GitHub Pages
+      - name: Deploy redirect to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/e2e.yml

@@ -0,0 +1,109 @@
+name: E2E Tests
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'code/**'
+      - 'e2e/**'
+      - '.github/workflows/e2e.yml'
+  pull_request:
+    paths:
+      - 'code/**'
+      - 'e2e/**'
+      - '.github/workflows/e2e.yml'
+  workflow_call:
+
+concurrency:
+  group: E2E Tests-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  e2e:
+    if: false
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    strategy:
+      fail-fast: false
+      matrix:
+        suite:
+          - name: api
+            make-target: up-api
+          - name: download-clients
+            make-target: up-dc
+
+    name: e2e (${{ matrix.suite.name }})
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          persist-credentials: false
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Start services
+        working-directory: e2e
+        run: make ${{ matrix.suite.make-target }}
+        env:
+          PACKAGES_USERNAME: ${{ github.repository_owner }}
+          PACKAGES_PAT: ${{ env.PACKAGES_PAT }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 26
+
+      - name: Install E2E dependencies
+        working-directory: e2e
+        run: npm ci
+
+      - name: Install Playwright browsers
+        working-directory: e2e
+        timeout-minutes: 5
+        run: npx playwright install chromium
+
+      - name: Wait for Keycloak
+        run: |
+          echo "Waiting for Keycloak realm to be ready..."
+          timeout 120 bash -c 'until curl -sf http://localhost:8080/realms/cleanuparr-test/.well-known/openid-configuration; do sleep 3; done'
+          echo "Keycloak ready!"
+
+      - name: Wait for app
+        run: |
+          echo "Waiting for Cleanuparr to be ready..."
+          timeout 120 bash -c 'until curl -sf http://localhost:5000/health; do sleep 3; done'
+          echo "App ready!"
+
+      - name: Run E2E tests
+        working-directory: e2e
+        run: npx playwright test --project=${{ matrix.suite.name }}
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v7
+        if: always()
+        with:
+          name: e2e-test-results-${{ matrix.suite.name }}
+          path: |
+            e2e/playwright-report/
+            e2e/test-results/
+          retention-days: 7
+
+      - name: Stop services
+        if: always()
+        working-directory: e2e
+        run: docker compose -f docker-compose.e2e.yml down

.github/workflows/pipeline.yml

@@ -1,20 +0,0 @@
-on:
-  push:
-    tags:
-      - "v*.*.*"
-    # paths:
-    #   - 'code/**'
-    # branches: [ main ]
-  pull_request:
-    paths:
-      - 'code/**'
-
-jobs:
-  build:
-    uses: flmorg/cleanuperr/.github/workflows/build.yml@main
-    secrets: inherit
-
-  # deploy:
-  #   needs: [ build ]
-  #   uses: flmorg/cleanuperr/.github/workflows/deploy.yml@main
-  #   secrets: inherit

.github/workflows/pr-build.yml

@@ -0,0 +1,207 @@
+name: PR Build (Comment Triggered)
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+  actions: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    if: github.event.issue.pull_request != null
+    outputs:
+      build: ${{ steps.parse.outputs.build }}
+      pr_ref: ${{ steps.parse.outputs.pr_ref }}
+      pr_sha: ${{ steps.parse.outputs.pr_sha }}
+      pr_number: ${{ steps.parse.outputs.pr_number }}
+
+    steps:
+      - name: Parse command and check permissions
+        id: parse
+        uses: actions/github-script@v9
+        with:
+          script: |
+            const comment = context.payload.comment.body.trim();
+
+            // Parse supported commands
+            const commands = {
+              '/build-windows': 'windows',
+              '/build-linux': 'linux'
+            };
+
+            const target = commands[comment];
+            if (!target) {
+              console.log(`Comment "${comment}" is not a recognized build command, skipping.`);
+              return;
+            }
+
+            try {
+              await github.rest.reactions.createForIssueComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: context.payload.comment.id,
+                content: 'eyes'
+              });
+            } catch (e) {
+              console.log(`Could not add reaction: ${e}`);
+            }
+
+            // Fetch PR details
+            const pr = await github.rest.pulls.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.issue.number
+            });
+
+            // Verify PR is open
+            if (pr.data.state !== 'open') {
+              console.log('PR is not open, skipping.');
+              return;
+            }
+
+            // Block fork PRs — fork code should not run with access to secrets
+            const isFork = pr.data.head.repo.full_name !== context.repo.owner + '/' + context.repo.repo;
+            if (isFork) {
+              console.log(`PR is from fork ${pr.data.head.repo.full_name}, blocking build.`);
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                body: 'On-demand builds are not available for PRs from forks.'
+              });
+              return;
+            }
+
+            // Verify commenter has write access
+            let permission = 'none';
+            try {
+              const resp = await github.rest.repos.getCollaboratorPermissionLevel({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                username: context.payload.comment.user.login
+              });
+              permission = resp.data.permission;
+            } catch (_) {}
+
+            if (!['admin', 'write'].includes(permission)) {
+              console.log(`User ${context.payload.comment.user.login} has '${permission}' permission — insufficient.`);
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                body: `@${context.payload.comment.user.login} Only collaborators with write access can trigger builds.`
+              });
+              return;
+            }
+
+            console.log(`User ${context.payload.comment.user.login} has '${permission}' permission — proceeding with ${comment}.`);
+            core.setOutput('build', target);
+
+            // Export PR details for downstream jobs
+            core.setOutput('pr_ref', pr.data.head.ref);
+            core.setOutput('pr_sha', pr.data.head.sha);
+            core.setOutput('pr_number', String(pr.data.number));
+
+  build-frontend:
+    needs: validate
+    if: needs.validate.outputs.build != ''
+    uses: ./.github/workflows/build-frontend.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+    secrets: inherit
+
+  build-windows:
+    needs: [validate, build-frontend]
+    if: needs.validate.outputs.build == 'windows'
+    concurrency:
+      group: pr-build-windows-${{ needs.validate.outputs.pr_number }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/build-windows-installer.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+    secrets: inherit
+
+  build-linux:
+    needs: [validate, build-frontend]
+    if: needs.validate.outputs.build == 'linux'
+    concurrency:
+      group: pr-build-linux-${{ needs.validate.outputs.pr_number }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/build-executable.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+      platforms: '[{"runtime":"linux-x64","platform":"linux-amd64"},{"runtime":"linux-arm64","platform":"linux-arm64"}]'
+    secrets: inherit
+
+  post-result:
+    needs: [validate, build-windows, build-linux]
+    if: always() && needs.validate.outputs.build != ''
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Post result comment
+        uses: actions/github-script@v9
+        env:
+          PR_REF: ${{ needs.validate.outputs.pr_ref }}
+        with:
+          script: |
+            const target = '${{ needs.validate.outputs.build }}';
+            const builds = {
+              windows: {
+                label: 'Windows installer',
+                result: '${{ needs.build-windows.result }}',
+                artifacts: '`Cleanuparr-windows-installer`'
+              },
+              linux: {
+                label: 'Linux executables',
+                result: '${{ needs.build-linux.result }}',
+                artifacts: '`executable-linux-amd64` and `executable-linux-arm64`'
+              }
+            };
+
+            const build = builds[target];
+            const buildResult = build.result;
+            const runUrl = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`;
+            const prRef = process.env.PR_REF;
+            const prSha = '${{ needs.validate.outputs.pr_sha }}';
+            const shortSha = prSha.substring(0, 7);
+
+            // Skip comment for skipped builds
+            if (buildResult === 'skipped') {
+              console.log('Build was skipped, no comment needed.');
+              return;
+            }
+
+            let body;
+            if (buildResult === 'success') {
+              body = [
+                `${build.label} build **succeeded** for \`${prRef}\` (\`${shortSha}\`).`,
+                ``,
+                `**Download:** open the [workflow run](${runUrl}), scroll to the **Artifacts** section at the bottom.`,
+                `The ${build.artifacts} artifact(s) are retained for 30 days.`
+              ].join('\n');
+            } else if (buildResult === 'cancelled') {
+              body = [
+                `${build.label} build was **cancelled** for \`${prRef}\` (\`${shortSha}\`).`,
+                ``,
+                `See the [workflow run](${runUrl}) for details.`
+              ].join('\n');
+            } else {
+              body = [
+                `${build.label} build **failed** for \`${prRef}\` (\`${shortSha}\`).`,
+                ``,
+                `See the [workflow run](${runUrl}) for details.`
+              ].join('\n');
+            }
+
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: parseInt('${{ needs.validate.outputs.pr_number }}'),
+              body
+            });

.github/workflows/pr-label.yml

@@ -0,0 +1,29 @@
+name: PR Label
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, labeled, unlabeled]
+
+concurrency:
+  group: PR Label-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  category:
+    name: Require category label
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Fail when no category label is present
+        if: >-
+          !contains(github.event.pull_request.labels.*.name, 'breaking') &&
+          !contains(github.event.pull_request.labels.*.name, 'enhancement') &&
+          !contains(github.event.pull_request.labels.*.name, 'bug') &&
+          !contains(github.event.pull_request.labels.*.name, 'documentation') &&
+          !contains(github.event.pull_request.labels.*.name, 'chore')
+        run: |
+          echo "::error::Add one of these labels so the release notes can be categorised: breaking, enhancement, bug, documentation, chore"
+          exit 1

.github/workflows/release.yml

@@ -1,11 +1,387 @@
+name: Release Build
+
 on:
   push:
     tags:
       - "v*.*.*"
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to release (e.g., 1.0.0)'
+        required: true
+      runTests:
+        description: 'Run test suite'
+        type: boolean
+        required: false
+        default: true
+      buildDocker:
+        description: 'Build Docker image'
+        type: boolean
+        required: false
+        default: true
+      pushDocker:
+        description: 'Push Docker image to registry'
+        type: boolean
+        required: false
+        default: false
+      buildBinaries:
+        description: 'Build executables and installers'
+        type: boolean
+        required: false
+        default: true
+      createRelease:
+        description: 'Create GitHub release'
+        type: boolean
+        required: false
+        default: false
+
+permissions:
+  contents: read
 
 jobs:
-  release:
-    uses: flmorg/universal-workflows/.github/workflows/dotnet.release.yml@main
+  # Validate release
+  validate:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+    outputs:
+      app_version: ${{ steps.version.outputs.app_version }}
+      release_version: ${{ steps.version.outputs.release_version }}
+      is_tag: ${{ steps.version.outputs.is_tag }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Get version info
+        id: version
+        run: |
+          if [[ "${{ github.ref }}" =~ ^refs/tags/ ]]; then
+            # Tag event
+            release_version=${GITHUB_REF##refs/tags/}
+            app_version=${release_version#v}
+            is_tag=true
+          else
+            # Manual workflow with version
+            app_version="${{ github.event.inputs.version }}"
+
+            # Validate version format (x.x.x)
+            if ! [[ "$app_version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+              echo "Error: Version must be in format x.x.x (e.g., 1.0.0)"
+              echo "Provided version: $app_version"
+              exit 1
+            fi
+
+            release_version="v$app_version"
+            is_tag=false
+          fi
+
+          echo "app_version=$app_version" >> $GITHUB_OUTPUT
+          echo "release_version=$release_version" >> $GITHUB_OUTPUT
+          echo "is_tag=$is_tag" >> $GITHUB_OUTPUT
+
+          echo "Release Version: $release_version"
+          echo "App Version: $app_version"
+          echo "Is Tag: $is_tag"
+
+      - name: Check if release already exists
+        run: |
+          if gh release view "${{ steps.version.outputs.release_version }}" &>/dev/null; then
+            echo "❌ Release ${{ steps.version.outputs.release_version }} already exists. Stopping workflow."
+            exit 1
+          fi
+          echo "✅ Release ${{ steps.version.outputs.release_version }} does not exist. Proceeding."
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Check the version against PR labels
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          APP_VERSION: ${{ steps.version.outputs.app_version }}
+        run: |
+          previous_tag=$(gh release view --json tagName --jq .tagName 2>/dev/null || echo "")
+
+          if [ -z "$previous_tag" ]; then
+            echo "No previous release found. Skipping the label check."
+            exit 0
+          fi
+
+          published=$(gh release view "$previous_tag" --json publishedAt --jq .publishedAt)
+
+          if ! breaking_list=$(gh api --paginate "repos/${{ github.repository }}/issues?labels=breaking&state=closed&since=$published&per_page=100" \
+            --jq ".[] | select(.pull_request.merged_at > \"$published\") | \"  #\(.number) \(.title)\""); then
+            echo "::error::Failed to query pull request labels, cannot verify the version"
+            printf '%s\n' "$breaking_list"
+            exit 1
+          fi
+
+          breaking=$(printf '%s' "$breaking_list" | grep -c . || true)
+
+          previous_version=${previous_tag#v}
+
+          if [ "$previous_version" = "$APP_VERSION" ]; then
+            echo "::error::$APP_VERSION is the same version as the previous release $previous_tag."
+            exit 1
+          fi
+
+          if [ "$(printf '%s\n%s\n' "$previous_version" "$APP_VERSION" | sort -V | tail -1)" != "$APP_VERSION" ]; then
+            echo "::error::$APP_VERSION is older than the previous release $previous_tag. Releases must move forward."
+            exit 1
+          fi
+
+          previous_minor=${previous_version%.*}
+          new_minor=${APP_VERSION%.*}
+
+          echo "Previous release: $previous_tag (published $published)"
+          echo "Breaking PRs merged since: $breaking"
+
+          if [ "$breaking" -gt 0 ] && [ "$previous_minor" = "$new_minor" ]; then
+            echo "::error::$breaking PR(s) labelled 'breaking' were merged since $previous_tag, so $APP_VERSION cannot be a patch release. Bump the minor, or remove the label if it was applied by mistake. See RELEASING.md."
+            printf '%s\n' "$breaking_list"
+            exit 1
+          fi
+
+          if [ "$breaking" -eq 0 ] && [ "$previous_minor" != "$new_minor" ]; then
+            echo "::warning::$APP_VERSION bumps the minor but no PR merged since $previous_tag carries the 'breaking' label. Intentional for a policy or milestone release, otherwise check the labels."
+          fi
+
+          echo "✅ Version $APP_VERSION is consistent with the PR labels."
+
+  # Run tests
+  test:
+    needs: validate
+    if: ${{ needs.validate.outputs.is_tag == 'true' || github.event.inputs.runTests == 'true' }}
+    uses: ./.github/workflows/test.yml
+    secrets: inherit
+
+  # Run E2E tests
+  e2e:
+    needs: validate
+    # if: ${{ needs.validate.outputs.is_tag == 'true' || github.event.inputs.runTests == 'true' }}
+    if: false
+    uses: ./.github/workflows/e2e.yml
+    secrets: inherit
+
+  # Build frontend once for all build jobs and cache it
+  build-frontend:
+    needs: [validate, test, e2e]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-frontend.yml
+    secrets: inherit
+
+  # Build portable executables
+  build-executables:
+    needs: [validate, test, e2e, build-frontend]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') &&
+      needs.build-frontend.result == 'success' &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-executable.yml
     with:
-      githubContext: ${{ toJSON(github) }}
-    secrets: inherit
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Build Windows installer
+  build-windows-installer:
+    needs: [validate, test, e2e, build-frontend]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') &&
+      needs.build-frontend.result == 'success' &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-windows-installer.yml
+    with:
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Build macOS installers (Intel and ARM)
+  build-macos:
+    needs: [validate, test, e2e, build-frontend]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') &&
+      needs.build-frontend.result == 'success' &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-macos-installer.yml
+    with:
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Build and push Docker image(s)
+  build-docker:
+    needs: [validate, test, e2e]
+    permissions:
+      contents: read
+      packages: write
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildDocker == 'true')
+    uses: ./.github/workflows/build-docker.yml
+    with:
+      push_docker: ${{ needs.validate.outputs.is_tag == 'true' || github.event.inputs.pushDocker == 'true' }}
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Create GitHub release
+  create-release:
+    needs: [validate, build-executables, build-windows-installer, build-macos]
+    runs-on: ubuntu-latest
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      needs.build-executables.result == 'success' &&
+      needs.build-windows-installer.result == 'success' &&
+      needs.build-macos.result == 'success' &&
+      (
+        needs.validate.outputs.is_tag == 'true' ||
+        (github.event.inputs.createRelease == 'true' && github.event.inputs.buildBinaries == 'true')
+      )
+    
+    steps:
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT
+
+      - name: Download executable artifacts
+        uses: actions/download-artifact@v8
+        with:
+          pattern: executable-*
+          path: ./artifacts
+          merge-multiple: true
+
+      - name: Download Windows installer
+        uses: actions/download-artifact@v8
+        with:
+          name: Cleanuparr-windows-installer
+          path: ./artifacts
+
+      - name: Download macOS installers
+        uses: actions/download-artifact@v8
+        with:
+          pattern: Cleanuparr-macos-*-installer
+          path: ./artifacts
+          merge-multiple: true
+
+      - name: List downloaded artifacts
+        run: |
+          echo "Downloaded artifacts:"
+          find ./artifacts -type f \( -name "*.zip" -o -name "*.pkg" -o -name "*.exe" \) | sort
+          echo ""
+          echo "Total files: $(find ./artifacts -type f \( -name "*.zip" -o -name "*.pkg" -o -name "*.exe" \) | wc -l)"
+
+      - name: Create release
+        uses: softprops/action-gh-release@v3
+        with:
+          name: ${{ needs.validate.outputs.release_version }}
+          tag_name: ${{ needs.validate.outputs.release_version }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          make_latest: true
+          target_commitish: main
+          generate_release_notes: true
+          files: |
+            ./artifacts/*.zip
+            ./artifacts/*.pkg
+            ./artifacts/*.exe
+
+  # Deploy docs after a successful release
+  deploy-docs:
+    needs: [create-release]
+    if: always() && needs.create-release.result == 'success'
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    uses: ./.github/workflows/docs.yml
+    secrets: inherit
+
+  # Deploy Cloudflare status page after a successful release
+  deploy-status:
+    needs: [validate, create-release]
+    if: always() && needs.create-release.result == 'success'
+    uses: ./.github/workflows/cloudflare-pages-status.yml
+    with:
+      version: ${{ needs.validate.outputs.release_version }}
+    secrets: inherit
+
+  # Summary job
+  summary:
+    needs: [validate, test, e2e, build-frontend, build-executables, build-windows-installer, build-macos, build-docker]
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+    if: always()
+
+    steps:
+      - name: Record workflow start time
+        id: workflow-start
+        run: |
+          # Get workflow start time from GitHub API
+          workflow_start=$(gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }} --jq '.run_started_at')
+          start_epoch=$(date -d "$workflow_start" +%s 2>/dev/null || date -j -f "%Y-%m-%dT%H:%M:%SZ" "$workflow_start" +%s)
+          echo "start=$start_epoch" >> $GITHUB_OUTPUT
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build Summary
+        run: |
+          # Calculate total workflow duration
+          start_time=${{ steps.workflow-start.outputs.start }}
+          end_time=$(date +%s)
+          duration=$((end_time - start_time))
+          minutes=$((duration / 60))
+          seconds=$((duration % 60))
+          echo "## 🏗️ Cleanuparr Build Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version**: ${{ needs.validate.outputs.release_version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**App Version**: ${{ needs.validate.outputs.app_version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Is Tag**: ${{ needs.validate.outputs.is_tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Total Duration**: ${minutes}m ${seconds}s" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Build Results" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Helper function to print job result
+          print_result() {
+            local name="$1"
+            local result="$2"
+            case "$result" in
+              success) echo "✅ **$name**: Success" >> $GITHUB_STEP_SUMMARY ;;
+              skipped) echo "⏭️ **$name**: Skipped" >> $GITHUB_STEP_SUMMARY ;;
+              *) echo "❌ **$name**: $result" >> $GITHUB_STEP_SUMMARY ;;
+            esac
+          }
+
+          print_result "Tests" "${{ needs.test.result }}"
+          print_result "E2E Tests" "${{ needs.e2e.result }}"
+          print_result "Frontend Build" "${{ needs.build-frontend.result }}"
+          print_result "Portable Executables" "${{ needs.build-executables.result }}"
+          print_result "Windows Installer" "${{ needs.build-windows-installer.result }}"
+          print_result "macOS Installers (Intel & ARM)" "${{ needs.build-macos.result }}"
+          print_result "Docker Image Build" "${{ needs.build-docker.result }}"
+
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "🎉 **Build completed!**" >> $GITHUB_STEP_SUMMARY 

.github/workflows/test.yml

@@ -0,0 +1,105 @@
+name: Tests
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'code/backend/**'
+      - '.github/workflows/test.yml'
+  pull_request:
+    paths:
+      - 'code/backend/**'
+      - '.github/workflows/test.yml'
+  workflow_call:
+
+# Cancel in-progress runs for the same PR
+concurrency:
+  group: Tests-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          persist-credentials: false
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v6
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json', '**/*.csproj') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Restore dependencies
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/cleanuparr.sln
+
+      - name: Build solution
+        run: dotnet build code/backend/cleanuparr.sln --configuration Release --no-restore
+
+      - name: Run tests
+        id: run-tests
+        run: dotnet test code/backend/cleanuparr.sln --configuration Release --no-build --verbosity normal --logger trx --collect:"XPlat Code Coverage" --settings code/backend/coverage.runsettings --results-directory ./coverage
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v7
+        with:
+          name: test-results
+          path: ./coverage/*.trx
+          retention-days: 30
+
+      - name: Upload coverage reports
+        uses: actions/upload-artifact@v7
+        with:
+          name: coverage-report
+          path: ./coverage/**/coverage.cobertura.xml
+          retention-days: 30
+
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v7
+        with:
+          files: ./coverage/**/coverage.cobertura.xml
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: false
+          flags: backend
+          name: backend-coverage
+
+      - name: Test Summary
+        run: |
+          echo "## Test Results" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          if [ "${{ steps.run-tests.outcome }}" == "success" ]; then
+            echo "✅ All tests passed!" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "❌ Tests failed or were cancelled. Status: ${{ steps.run-tests.outcome }}" >> $GITHUB_STEP_SUMMARY
+          fi
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "Test artifacts have been uploaded for detailed analysis." >> $GITHUB_STEP_SUMMARY

.github/workflows/version-info.yml

@@ -0,0 +1,69 @@
+name: Get Version Info
+
+on:
+  workflow_call:
+    inputs:
+      manual_version:
+        description: 'Manual version override (e.g., 1.0.0)'
+        required: false
+        type: string
+        default: ''
+    outputs:
+      app_version:
+        description: 'Application version (without v prefix)'
+        value: ${{ jobs.version.outputs.app_version }}
+      release_version:
+        description: 'Release version (with v prefix)'
+        value: ${{ jobs.version.outputs.release_version }}
+      is_tag:
+        description: 'Whether this is a tag event'
+        value: ${{ jobs.version.outputs.is_tag }}
+      repository_name:
+        description: 'Repository name without owner'
+        value: ${{ jobs.version.outputs.repository_name }}
+
+permissions:
+  contents: read
+
+jobs:
+  version:
+    runs-on: ubuntu-latest
+    outputs:
+      app_version: ${{ steps.version.outputs.app_version }}
+      release_version: ${{ steps.version.outputs.release_version }}
+      is_tag: ${{ steps.version.outputs.is_tag }}
+      repository_name: ${{ steps.version.outputs.repository_name }}
+
+    steps:
+      - name: Calculate version info
+        id: version
+        run: |
+          repoFullName="${{ github.repository }}"
+          repositoryName="${repoFullName#*/}"
+
+          if [[ "${{ github.ref }}" =~ ^refs/tags/ ]]; then
+            # Tag event
+            release_version="${GITHUB_REF##refs/tags/}"
+            app_version="${release_version#v}"
+            is_tag="true"
+          elif [[ -n "${{ inputs.manual_version }}" ]]; then
+            # Manual workflow with version
+            app_version="${{ inputs.manual_version }}"
+            release_version="v${app_version}"
+            is_tag="false"
+          else
+            # Development build
+            app_version="0.0.1-dev-$(date +%Y%m%d-%H%M%S)"
+            release_version="v${app_version}"
+            is_tag="false"
+          fi
+
+          echo "app_version=${app_version}" >> $GITHUB_OUTPUT
+          echo "release_version=${release_version}" >> $GITHUB_OUTPUT
+          echo "is_tag=${is_tag}" >> $GITHUB_OUTPUT
+          echo "repository_name=${repositoryName}" >> $GITHUB_OUTPUT
+
+          echo "📦 Repository: ${repositoryName}"
+          echo "🏷️ Release Version: ${release_version}"
+          echo "📱 App Version: ${app_version}"
+          echo "🔖 Is Tag: ${is_tag}"

CLAUDE.md

@@ -0,0 +1,195 @@
+# Cleanuparr - Claude AI Rules
+
+## Rules
+
+1. **DO NOT break existing functionality** - All features are critical and must continue to work
+2. **When in doubt, ASK** - Don't assume, clarify with the maintainer first
+3. **Always read existing code before making changes** - Understand the current architecture and patterns
+4. **Follow existing patterns** - Study the codebase style and match it exactly
+5. **Ask before introducing new patterns** - Use current coding standards or get approval first
+6. **Prefer editing existing files over creating new ones** - Build on existing work
+7. **Flag potential gotchas or issues immediately** - Document and report anything unexpected
+8. **If unsure about an approach, ask before implementing**
+
+## Project Overview
+
+Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, Lidarr, Readarr, Whisparr and supported download clients (qBittorrent, Transmission, Deluge, uTorrent, rTorrent). It provides malware protection, automated cleanup, and queue management for *arr applications.
+
+**Key Features:**
+- Strike system for bad downloads
+- Malware detection and blocking
+- Automatic search triggering after removal (Seeker)
+- Missing and upgrade search
+- Orphaned download cleanup with cross-seed support
+- Authentication (OIDC, 2FA)
+- Notification providers (Apprise, Discord, Gotify, Notifiarr, Ntfy, Pushover, Telegram)
+
+## Architecture & Tech Stack
+
+### Backend
+- **.NET 10.0** (C#) with ASP.NET Core
+- **Architecture**: Clean Architecture with `Features/` subdirectory pattern
+  - `Cleanuparr.Api` - REST API and web host (`Features/` for endpoint groups)
+  - `Cleanuparr.Application` - Application services and use cases
+  - `Cleanuparr.Domain` - Domain models (Entities, Enums, Exceptions)
+  - `Cleanuparr.Infrastructure` - External integrations (`Features/` for Arr, DownloadClient, Notifications, etc.)
+  - `Cleanuparr.Persistence` - Data access with EF Core (SQLite)
+  - `Cleanuparr.Shared` - Shared utilities
+- **Database**: SQLite with Entity Framework Core
+  - Three separate contexts: `DataContext`, `EventsContext`, `UsersContext`
+- **Key Libraries**:
+  - MassTransit (messaging)
+  - Quartz.NET (scheduling)
+  - Serilog (logging)
+  - SignalR (real-time communication)
+- **Testing**: xUnit + NSubstitute + Shouldly
+  - Always use **NSubstitute** for mocking in new tests (Moq is being phased out)
+
+### Frontend
+- **Angular 22** with TypeScript 6.0, Node 26 (standalone components, zoneless, OnPush)
+- **UI**: Custom glassmorphism design system with 33 custom components — no external UI frameworks
+- **Icons**: @ng-icons/core + @ng-icons/tabler-icons
+- **Design System**: 3-layer SCSS (`_variables` -> `_tokens` -> `_themes`), dark/light themes
+- **State Management**: Angular signals (`signal`/`computed`/`effect`) — `@ngrx/signals` was removed (it was unused)
+- **Data fetching**: Angular 22 Resource API — `rxResource` from `@angular/core/rxjs-interop` (not manual `HttpClient.subscribe()`)
+- **Forms**: Angular 22 Signal Forms — `form()` + `[formField]` from `@angular/forms/signals` (settings forms; a few not-yet-migrated forms still use per-field signals)
+- **Real-time Updates**: @microsoft/signalr 10.0.0
+- **PWA**: Service Worker support enabled
+
+## Project Structure
+
+```
+Cleanuparr/
+├── code/
+│   ├── backend/
+│   │   ├── Cleanuparr.Api/              # REST API (Features/ for endpoint groups)
+│   │   ├── Cleanuparr.Api.Tests/        # API layer tests
+│   │   ├── Cleanuparr.Application/      # Business logic layer
+│   │   ├── Cleanuparr.Domain/           # Domain models
+│   │   ├── Cleanuparr.Infrastructure/   # External integrations (Features/ subdirs)
+│   │   ├── Cleanuparr.Infrastructure.Tests/
+│   │   ├── Cleanuparr.Persistence/      # SQLite data access
+│   │   ├── Cleanuparr.Persistence.Tests/
+│   │   └── Cleanuparr.Shared/           # Shared utilities
+│   ├── frontend/                        # Angular 22 application
+│   ├── e2e/                             # Playwright E2E tests
+│   ├── Dockerfile                       # Multi-stage Docker build
+│   ├── entrypoint.sh                    # Docker entrypoint
+│   └── Makefile                         # Build & migration helpers
+├── docs/                                # Docusaurus documentation
+├── .github/workflows/                   # CI/CD pipelines
+├── blacklist                            # Default malware patterns (strict)
+├── blacklist_permissive                 # Less strict malware patterns
+├── whitelist                            # Safe file extensions
+└── whitelist_with_subtitles             # Includes subtitle formats
+```
+
+## Code Standards & Conventions
+
+**IMPORTANT:** Always study existing code in the relevant area before making changes. Match the existing style exactly.
+
+### Backend (C#)
+- Follow Microsoft C# Coding Conventions
+- Use nullable reference types (`<Nullable>enable</Nullable>`)
+- Add XML documentation comments for public APIs
+- Use meaningful names - avoid abbreviations unless widely understood
+- Keep services focused - single responsibility principle
+- New integrations go under `Features/` subdirectories (e.g., `Infrastructure/Features/Arr/`)
+
+### Frontend (TypeScript/Angular)
+- All components must be **standalone** with **ChangeDetectionStrategy.OnPush**
+- Use `input()` / `output()` function APIs (not `@Input()` / `@Output()` decorators)
+- Use Angular **signals** for reactive state (`signal()`, `computed()`, `effect()`)
+- **Data fetching**: use the **Resource API** (`rxResource`) with a reactive `params` + `stream`, not manual `HttpClient.subscribe()`; drive spinners/errors off `isLoading()`/`error()`
+- **Forms**: use **Signal Forms** (`form()` + `[formField]`) with a single model signal + schema validators; keep the JSON-snapshot dirty tracking (`buildSnapshot()`/`hasPendingChanges()`), do NOT use Signal Forms `dirty()` for the unsaved-changes guard
+- Follow the 3-layer SCSS design system (`_variables` -> `_tokens` -> `_themes`)
+- **Do not introduce external UI frameworks** (no PrimeNG, Material, Tailwind, etc.)
+- Component naming: `{feature}.component.ts`
+- Service naming: `{feature}.service.ts`
+- **Look at similar existing components before creating new ones**
+
+### Testing
+- **Backend**: xUnit + NSubstitute + Shouldly
+- Always use **NSubstitute** for mocking (Moq is being phased out)
+- Write unit tests for new features and bug fixes
+- Use descriptive test names that explain what is being tested
+- No frontend unit tests currently
+
+### Git Commit Messages
+- Use clear, descriptive messages in imperative mood
+- Examples: "Add Discord notification support", "Fix memory leak in download client polling"
+- Reference issue numbers when applicable: "Fix #123: Handle null response from Radarr API"
+
+## Development Setup
+
+### Running the Backend
+```bash
+cd code/backend
+dotnet build Cleanuparr.Api/Cleanuparr.Api.csproj
+dotnet run --project Cleanuparr.Api/Cleanuparr.Api.csproj
+```
+API runs at http://localhost:5000
+
+### Running the Frontend
+```bash
+cd code/frontend
+npm install
+npm start
+```
+UI runs at http://localhost:4200
+
+### Running Tests
+```bash
+cd code/backend
+dotnet test
+```
+
+## Database Migrations
+
+Three separate database contexts, all commands run from the `code` directory:
+
+```bash
+# Data migrations (DataContext)
+make migrate-data name=YourMigrationName
+
+# Events migrations (EventsContext)
+make migrate-events name=YourMigrationName
+
+# Users migrations (UsersContext)
+make migrate-users name=YourMigrationName
+```
+
+## Common Development Workflows
+
+### Adding a New *arr Application Integration
+1. Add integration in `Cleanuparr.Infrastructure/Features/Arr/`
+2. Update domain models in `Cleanuparr.Domain/`
+3. Create/update services in `Cleanuparr.Application/`
+4. Add API endpoints in `Cleanuparr.Api/Features/Arr/`
+5. Update frontend in `code/frontend/src/app/`
+
+### Adding a New Download Client
+1. Add client implementation in `Cleanuparr.Infrastructure/Features/DownloadClient/`
+2. Follow existing patterns (qBittorrent, Transmission, etc.)
+3. Add configuration models to `Cleanuparr.Domain/`
+4. Update API and frontend as above
+
+### Adding a New Notification Provider
+1. Add provider in `Cleanuparr.Infrastructure/Features/Notifications/`
+2. Update configuration models
+3. Add UI configuration in frontend
+
+## Key Gotchas
+
+- **Custom glassmorphism design system** - Do not introduce external UI frameworks (no PrimeNG, Material, Tailwind)
+- **All frontend components** must be standalone with OnPush change detection
+- **Database migrations** require awareness of all three contexts (Data, Events, Users)
+- **Malware blocker** is a critical security feature - changes require careful testing
+- **Cross-seed integration** allows keeping torrents that are actively seeding
+- **Real-time updates** use SignalR - maintain websocket patterns when adding features
+- Use `@ng-icons/core` + `@ng-icons/tabler-icons` for icons (NOT `angular-tabler-icons` which doesn't support Angular 22)
+- **Sidebar** stays dark purple in both themes - uses sidebar-specific CSS variables
+- The project uses **Clean Architecture** - respect layer boundaries
+- **Settings dirty tracking** uses JSON snapshot comparison (`buildSnapshot()` + `hasPendingChanges()`) — keep this even with Signal Forms; Signal Forms `dirty()` means "touched", not "differs from saved"
+- **Resource API** (`rxResource`): `value()` throws in the error state — always set a `defaultValue` (lists) or guard with `hasValue()` before reading
+- **Signal Forms** (`[formField]`) owns `min`/`max`/`disabled`/`required` — set these via schema validators, not template bindings. Custom controls satisfy the contract via `model()` signals (`chip-input` exposes a `value` model; `size-input`'s numeric-min input is named `minValue` to avoid clashing with the field min)

CONTRIBUTING.md

@@ -0,0 +1,332 @@
+# Contributing to Cleanuparr
+
+Thanks for your interest in contributing to Cleanuparr! This guide will help you get started with development.
+
+## Before You Start
+
+### AI usage
+
+In this ever-evolving field of work, AI is now the shiny new tool to help programmers work faster and there's nothing wrong with that.
+But it is **very** wrong to rely solely on AI tools to write, review and test your code.
+
+**If you do not have a background in programming and you do not intend to test your code properly, please do not submit AI-generated code.** If you still want to help in other ways such as testing features, that would also help a lot!
+
+### Announce Your Intent
+
+Before starting any work, please let us know what you want to contribute:
+
+- For existing issues: Comment on the issue stating you'd like to work on it
+- For new features/changes: Create a new issue first and mention that you want to work on it
+
+This helps us avoid redundant work, git conflicts, and contributions that may not align with the project's direction.
+
+**Wait for approval from the maintainers before proceeding with your contribution.**
+
+## Development Setup
+
+### Prerequisites
+
+- [.NET 10.0 SDK](https://dotnet.microsoft.com/download/dotnet/10.0)
+- [Node.js 26+](https://nodejs.org/)
+- [Git](https://git-scm.com/)
+- (Optional) [Make](https://www.gnu.org/software/make/) for database migrations
+- (Optional) IDE: [JetBrains Rider](https://www.jetbrains.com/rider/) or [Visual Studio](https://visualstudio.microsoft.com/)
+
+### Repository Setup
+
+1. Fork the repository on GitHub
+2. Clone your fork locally:
+   ```bash
+   git clone https://github.com/YOUR_USERNAME/Cleanuparr.git
+   cd Cleanuparr
+   ```
+3. Add the upstream repository:
+   ```bash
+   git remote add upstream https://github.com/Cleanuparr/Cleanuparr.git
+   ```
+
+## Backend Development
+
+### Initial Setup
+
+#### 1. Create a GitHub Personal Access Token (PAT)
+
+Cleanuparr uses GitHub Packages for NuGet dependencies. You'll need a PAT with `read:packages` permission:
+
+1. Go to [GitHub Settings > Developer Settings > Personal Access Tokens > Tokens (classic)](https://github.com/settings/tokens)
+2. Click "Generate new token" → "Generate new token (classic)"
+3. Give it a descriptive name (e.g., "Cleanuparr NuGet Access")
+4. Set an expiration (recommend 90 days or longer for development)
+5. Select only the `read:packages` scope
+6. Click "Generate token" and copy it
+
+#### 2. Configure NuGet Source
+
+Add the Cleanuparr NuGet repository:
+
+```bash
+dotnet nuget add source \
+  --username YOUR_GITHUB_USERNAME \
+  --password YOUR_GITHUB_PAT \
+  --store-password-in-clear-text \
+  --name Cleanuparr \
+  https://nuget.pkg.github.com/Cleanuparr/index.json
+```
+
+Replace `YOUR_GITHUB_USERNAME` and `YOUR_GITHUB_PAT` with your GitHub username and the PAT you created.
+
+### Running the Backend
+
+#### Option 1: Using .NET CLI
+
+Navigate to the backend directory:
+```bash
+cd code/backend
+```
+
+Build the application:
+```bash
+dotnet build Cleanuparr.Api/Cleanuparr.Api.csproj
+```
+
+Run the application:
+```bash
+dotnet run --project Cleanuparr.Api/Cleanuparr.Api.csproj
+```
+
+Run tests:
+```bash
+dotnet test
+```
+
+The API will be available at http://localhost:5000
+
+#### Option 2: Using an IDE
+
+For JetBrains Rider or Visual Studio:
+1. Open the solution file: `code/backend/cleanuparr.sln`
+2. Set `Cleanuparr.Api` as the startup project
+3. Press `F5` to start the application
+
+### Database Migrations
+
+Cleanuparr uses two separate database contexts: `DataContext` and `EventsContext`.
+
+#### Prerequisites
+
+Install Make if not already installed:
+- Windows: Install via [Chocolatey](https://chocolatey.org/) (`choco install make`) or use [WSL](https://docs.microsoft.com/windows/wsl/)
+- macOS: Install via Homebrew (`brew install make`)
+- Linux: Usually pre-installed, or install via package manager (`apt install make`, `yum install make`, etc.)
+
+#### Creating Migrations
+
+From the `code` directory:
+
+For data migrations (DataContext):
+```bash
+make migrate-data name=YourMigrationName
+```
+
+For events migrations (EventsContext):
+```bash
+make migrate-events name=YourMigrationName
+```
+
+Example:
+```bash
+make migrate-data name=AddUserPreferences
+make migrate-events name=AddAuditLogEvents
+```
+
+## Frontend Development
+
+### Setup
+
+1. Navigate to the frontend directory:
+   ```bash
+   cd code/frontend
+   ```
+
+2. Install dependencies:
+   ```bash
+   npm install
+   ```
+
+3. Start the development server:
+   ```bash
+   npm start
+   ```
+
+The UI will be available at http://localhost:4200
+
+## Documentation Development
+
+### Setup
+
+1. Navigate to the docs directory:
+   ```bash
+   cd docs
+   ```
+
+2. Install dependencies:
+   ```bash
+   npm install
+   ```
+
+3. Start the development server:
+   ```bash
+   npm start
+   ```
+
+The documentation site will be available at http://localhost:3000
+
+## Building with Docker
+
+### Building a Local Docker Image
+
+To build the Docker image locally for testing:
+
+1. Navigate to the `code` directory:
+   ```bash
+   cd code
+   ```
+
+2. Build the image:
+   ```bash
+   docker build \
+     --build-arg PACKAGES_USERNAME=YOUR_GITHUB_USERNAME \
+     --build-arg PACKAGES_PAT=YOUR_GITHUB_PAT \
+     -t cleanuparr:local \
+     -f Dockerfile .
+   ```
+
+   Replace `YOUR_GITHUB_USERNAME` and `YOUR_GITHUB_PAT` with your credentials.
+
+3. Run the container:
+   ```bash
+   docker run -d \
+     --name cleanuparr-dev \
+     -p 11011:11011 \
+     -v /path/to/config:/config \
+     -e PUID=1000 \
+     -e PGID=1000 \
+     -e TZ=Etc/UTC \
+     cleanuparr:local
+   ```
+
+4. Access the application at http://localhost:11011
+
+### Building for Multiple Architectures
+
+Use Docker Buildx for multi-platform builds:
+
+```bash
+docker buildx build \
+  --platform linux/amd64,linux/arm64 \
+  --build-arg PACKAGES_USERNAME=YOUR_GITHUB_USERNAME \
+  --build-arg PACKAGES_PAT=YOUR_GITHUB_PAT \
+  -t cleanuparr:local \
+  -f Dockerfile .
+```
+
+## Code Standards
+
+### Backend (.NET/C#)
+- Follow existing conventions and [Microsoft C# Coding Conventions](https://docs.microsoft.com/dotnet/csharp/fundamentals/coding-style/coding-conventions)
+- Use meaningful variable and method names
+- Add XML documentation comments for public APIs
+- Write unit tests whenever possible
+
+### Frontend (Angular/TypeScript)
+- Follow existing conventions and the [Angular Style Guide](https://angular.io/guide/styleguide)
+- Use TypeScript strict mode
+- Write unit tests whenever possible
+
+### Documentation
+- Use clear, concise language
+- Include code examples where appropriate
+- Update relevant documentation when adding/changing features
+- Check for spelling and grammar
+
+## Submitting Your Contribution
+
+### 1. Create a Feature Branch
+
+```bash
+git checkout -b feature/your-feature-name
+# or
+git checkout -b fix/your-bug-fix-name
+```
+
+### 2. Make Your Changes
+
+- Write clean, well-documented code
+- Follow the code standards outlined above
+- **Test your changes thoroughly!**
+
+### 3. Commit Your Changes
+
+Write clear, descriptive commit messages:
+
+```bash
+git add .
+git commit -m "Add feature: brief description of your changes"
+```
+
+### 4. Keep Your Branch Updated
+
+```bash
+git fetch upstream
+git rebase upstream/main
+```
+
+### 5. Push to Your Fork
+
+```bash
+git push origin feature/your-feature-name
+```
+
+### 6. Create a Pull Request
+
+1. Go to the [Cleanuparr repository](https://github.com/Cleanuparr/Cleanuparr)
+2. Click "New Pull Request"
+3. Select your fork and branch
+4. Fill out the PR template with:
+   - A descriptive title (e.g., "Add support for Prowlarr integration" or "Fix memory leak in download client polling")
+   - Description of changes
+   - Related issue number
+   - Testing performed
+   - Screenshots (if applicable)
+
+### 7. Code Review Process
+
+- Maintainers will review your PR
+- Address any feedback or requested changes
+- Once approved, your PR will be merged
+
+## Other Ways to Contribute
+
+### Help Test New Features
+
+We're always looking for testers to help validate new features before they are released. If you'd like to help test upcoming changes:
+
+1. Join our [Discord community](https://discord.gg/SCtMCgtsc4)
+2. Let us know you're interested in testing
+3. We'll provide you with pre-release builds and testing instructions
+
+Your feedback helps us catch issues early and deliver better releases.
+
+## Getting Help
+
+- Discord: Join our [Discord community](https://discord.gg/SCtMCgtsc4) for real-time help
+- Issues: Check existing [GitHub issues](https://github.com/Cleanuparr/Cleanuparr/issues) or create a new one
+- Documentation: Review the [complete documentation](https://cleanuparr.github.io/Cleanuparr/)
+
+## License
+
+By contributing to Cleanuparr, you agree that your contributions will be licensed under the same license as the project.
+
+---
+
+Thanks for contributing to Cleanuparr!

Cloudflare/_headers

@@ -0,0 +1,3 @@
+# Cache static files for 5 minutes
+/static/*
+  Cache-Control: public, max-age=300, s-maxage=300

README.md

@@ -1,50 +1,119 @@
+<div align="center">
+
 _Love this project? Give it a ⭐️ and let others know!_
 
-# <img width="24px" src="./Logo/256.png" alt="cleanuperr"></img> Cleanuperr
+# <img width="24px" src="./Logo/256.png" alt="Cleanuparr"></img> Cleanuparr
+
+_/kliː.nʌp.ər/ — like "cleanuper", someone who does the cleanup. Not "CleanupArr" or "CleanUpArr"._
+
+![Version](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fcleanuparr-status.pages.dev%2Fstatus.json&query=%24.version&logo=git&label=version&color=blue)
+![Total Downloads](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fghcr-badge.elias.eu.org%2Fapi%2FCleanuparr%2FCleanuparr%2Fcleanuparr&query=%24.downloadCount&style=flat&logo=docker&label=Total%20Downloads&color=blue)
+[![Tests](https://github.com/Cleanuparr/Cleanuparr/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/Cleanuparr/Cleanuparr/actions/workflows/test.yml)
+
 
 [![Discord](https://img.shields.io/discord/1306721212587573389?color=7289DA&label=Discord&style=for-the-badge&logo=discord)](https://discord.gg/SCtMCgtsc4)
 
-Cleanuperr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. It removes incomplete or blocked downloads, updates queues, and enforces blacklists or whitelists to manage file selection. After removing blocked content, Cleanuperr can also trigger a search to replace the deleted shows/movies.
+</div>
 
-Cleanuperr was created primarily to address malicious files, such as `*.lnk` or `*.zipx`, that were getting stuck in Sonarr/Radarr and required manual intervention. Some of the reddit posts that made Cleanuperr come to life can be found [here](https://www.reddit.com/r/sonarr/comments/1gqnx16/psa_sonarr_downloaded_a_virus/), [here](https://www.reddit.com/r/sonarr/comments/1gqwklr/sonar_downloaded_a_mkv_file_which_looked_like_a/), [here](https://www.reddit.com/r/sonarr/comments/1gpw2wa/downloaded_waiting_to_import/) and [here](https://www.reddit.com/r/sonarr/comments/1gpi344/downloads_not_importing_no_files_found/).
+Cleanuparr is an advanced download manager for the Servarr ecosystem. It works with Sonarr, Radarr, Lidarr, Readarr, and Whisparr alongside download clients like qBittorrent, Transmission, and Deluge. Beyond cleaning up stalled, blocked, and malicious downloads, it searches for missing content and quality upgrades, manages seeding, and removes orphaned files.
+
+Cleanuparr was created primarily to address malicious files, such as `*.lnk` or `*.zipx`, that were getting stuck in Sonarr/Radarr and required manual intervention. Some of the reddit posts that made Cleanuparr come to life can be found [here](https://www.reddit.com/r/sonarr/comments/1gqnx16/psa_sonarr_downloaded_a_virus/), [here](https://www.reddit.com/r/sonarr/comments/1gqwklr/sonar_downloaded_a_mkv_file_which_looked_like_a/), [here](https://www.reddit.com/r/sonarr/comments/1gpw2wa/downloaded_waiting_to_import/) and [here](https://www.reddit.com/r/sonarr/comments/1gpi344/downloads_not_importing_no_files_found/).
 
 > [!IMPORTANT]
 > **Features:**
-> - Strike system to mark stalled or downloads stuck in metadata downloading.
+> - Strike system to mark bad downloads.
 > - Remove and block downloads that reached a maximum number of strikes.
-> - Remove and block downloads that have a low download speed or high estimated completion time.
-> - Remove downloads blocked by qBittorrent or by Cleanuperr's **content blocker**.
-> - Trigger a search for downloads removed from the *arrs.
-> - Clean up downloads that have been seeding for a certain amount of time.
+> - Remove and block downloads that are **failing to be imported** by the arrs.
+> - Remove and block downloads that are **stalled** or in **metadata downloading** state.
+> - Remove and block downloads that have a **low download speed** or **high estimated completion time**.
+> - Remove and block downloads blocked by qBittorrent or by Cleanuparr's **Malware Blocker**.
+> - Remove and block known malware based on patterns found by the community.
+> - Automatically trigger a search for downloads removed from the arrs.
+> - Proactively search for **missing** items across your Radarr and Sonarr libraries.
+> - Search for **quality upgrades** for items that haven't met their quality profile's cutoff (a.k.a. **Cutoff Unmet**).
+> - Search for **custom format score upgrades** with automatic score tracking.
+> - Clean up downloads that have been **seeding** for a certain amount of time.
+> - Remove downloads that are **orphaned**/have no **hardlinks**/are not referenced by the arrs anymore (with [cross-seed](https://www.cross-seed.org/) support).
+> - Scan configured directories for **files not claimed by any active torrent**, move them to a dedicated orphaned directory, and optionally auto-purge.
 > - Notify on strike or download removal.
-> - Ignore certain torrent hashes, categories, tags or trackers from being processed by Cleanuperr.
+> - Ignore certain torrent hashes, categories, tags or trackers from being processed by Cleanuparr.
 
-Cleanuperr supports both qBittorrent's built-in exclusion features and its own blocklist-based system. Binaries for all platforms are provided, along with Docker images for easy deployment.
+## Sponsored by GitAds
+[![Sponsored by GitAds](https://gitads.dev/v1/ad-serve?source=cleanuparr/cleanuparr@github)](https://gitads.dev/v1/ad-track?source=cleanuparr/cleanuparr@github)
 
-## Quick Start
+## Screenshots
 
-> [!NOTE]
->
-> 1. **Docker (Recommended)**  
-> Pull the Docker image from `ghcr.io/flmorg/cleanuperr:latest`.
->
-> 2. **Unraid (for Unraid users)**  
-> Use the Unraid Community App.
->
-> 3. **Manual Installation (if you're not using Docker)**  
-> Go to [Windows](#windows), [Linux](#linux) or [MacOS](#macos).
+https://cleanuparr.github.io/Cleanuparr/docs/screenshots
 
-# Docs
+## 🎯 Supported Applications
 
-Docs can be found [here](https://flmorg.github.io/cleanuperr/).
+### *Arr Applications (latest version)
+- **Sonarr**
+- **Radarr**
+- **Lidarr**
+- **Readarr**
+- **Whisparr v2**
+- **Whisparr v3**
 
-# <img style="vertical-align: middle;" width="24px" src="./Logo/256.png" alt="Cleanuperr"> <span style="vertical-align: middle;">Cleanuperr</span> <img src="https://raw.githubusercontent.com/FortAwesome/Font-Awesome/6.x/svgs/solid/x.svg" height="24px" width="30px" style="vertical-align: middle;"> <span style="vertical-align: middle;">Huntarr</span> <img style="vertical-align: middle;" width="24px" src="https://github.com/plexguide/Huntarr.io/blob/main/frontend/static/logo/512.png?raw=true" alt Huntarr></img>
+### Download Clients (latest version)
+- **qBittorrent**
+- **Transmission**
+- **Deluge**
+- **µTorrent**
+- **rTorrent**
 
-Think of **Cleanuperr** as the janitor of your server; it keeps your download queue spotless, removes clutter, and blocks malicious files. Now imagine combining that with **Huntarr**, the compulsive librarian who finds missing and upgradable media to complete your collection
+### Platforms
+- **Docker**
+- **Windows**
+- **macOS**
+- **Linux**
+- **Unraid**
 
-While **Huntarr** fills in the blanks and improves what you already have, **Cleanuperr** makes sure that only clean downloads get through. If you're aiming for a reliable and self-sufficient setup, **Cleanuperr** and **Huntarr** will take your automated media stack to another level.
+## 🚀 Quick Start
 
-<span style="font-size:24px"> ➡️ [**Huntarr**](https://github.com/plexguide/Huntarr.io) <span style="vertical-align: middle">![Huntarr](https://img.shields.io/github/stars/plexguide/Huntarr.io?style=social)</span></span> 
+```bash
+docker run -d --name cleanuparr \
+  --restart unless-stopped \
+  -p 11011:11011 \
+  -v /path/to/config:/config \
+  -e PORT=11011 \
+  -e PUID=1000 \
+  -e PGID=1000 \
+  -e TZ=Etc/UTC \
+  ghcr.io/cleanuparr/cleanuparr:latest
+```
+
+For Docker Compose, health checks, and other installation methods, see the [Complete Installation Guide](https://cleanuparr.github.io/Cleanuparr/docs/installation/detailed), but not before reading the [Prerequisites](https://cleanuparr.github.io/Cleanuparr/docs/installation/).
+
+> Prefer not to self-host? A managed Cleanuparr instance is available via [ElfHosted](https://store.elfhosted.com/product-category/personal-stacks/?utm_source=github&utm_medium=readme&utm_campaign=cleanuparr-readme), bundled alongside Sonarr/Radarr to keep your queues tidy (7-day trial).
+
+### 🌐 Access the Web Interface
+
+After installation, open your browser and navigate to:
+```
+http://localhost:11011
+```
+
+**Next Steps:** Check out the [📖 Complete Documentation](https://cleanuparr.github.io/Cleanuparr/) for detailed configuration guides and setup instructions.
+
+## 📖 Documentation & Support
+
+- **📚 [Complete Documentation](https://cleanuparr.github.io/Cleanuparr/)** - Installation guides, configuration, and troubleshooting
+- **⚙️ [Configuration Guide](https://cleanuparr.github.io/Cleanuparr/docs/category/configuration)** - Set up download clients, *arr apps, and features
+- **🔧 [Setup Scenarios](https://cleanuparr.github.io/Cleanuparr/docs/category/setup-scenarios)** - Common use cases and examples
+- **💬 [Discord Community](https://discord.gg/SCtMCgtsc4)** - Get help and discuss with other users
+- **🔗 [GitHub Releases](https://github.com/Cleanuparr/Cleanuparr/releases)** - Download binaries and view changelog
+
+## 🤝 Contributing
+
+We welcome contributions from the community! Whether it's bug fixes, new features, documentation improvements, or testing, your help is appreciated.
+
+**Before contributing:** Please read our [Contributing Guide](CONTRIBUTING.md) and announce your intent to work on an issue before starting.
+
+- **[Contributing Guide](CONTRIBUTING.md)** - Learn how to set up your development environment and submit contributions
+- **[Report Issues](https://github.com/Cleanuparr/Cleanuparr/issues/new/choose)** - Found a bug? Let us know!
+- **[Feature Requests](https://github.com/Cleanuparr/Cleanuparr/issues/new/choose)** - Share your ideas for new features
+- **[Help Test Features](https://discord.gg/SCtMCgtsc4)** - Join Discord to test pre-release features and provide feedback
 
 # Credits
 Special thanks for inspiration go to:
@@ -56,4 +125,4 @@ Special thanks for inspiration go to:
 # Buy me a coffee
 If I made your life just a tiny bit easier, consider buying me a coffee!
 
-<a href="https://buymeacoffee.com/flaminel" target="_blank"><img src="https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png" alt="Buy Me A Coffee" style="height: 41px !important;width: 174px !important;box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;-webkit-box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;" ></a>
+<a href="https://buymeacoffee.com/flaminel" target="_blank"><img src="https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png" alt="Buy Me A Coffee" style="height: 41px !important;width: 174px !important;box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;-webkit-box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;" ></a>

RELEASING.md

@@ -0,0 +1,87 @@
+# Releasing Cleanuparr
+
+Versioning rules and the release process are detailed in the user-facing version of this policy at [docs/docs/installation/versioning.mdx](docs/docs/installation/versioning.mdx) and published under [Versioning](https://cleanuparr.github.io/docs/installation/versioning).
+
+## Versioning
+
+This policy takes effect starting with **v2.10.0**. Previous releases did not follow this approach, and their version numbers have no compatibility meaning.
+
+| Part | Bump when |
+| --- | --- |
+| Major | Probably never, unless something significant changes. |
+| Minor | The release contains a breaking change. |
+| Patch | Anything else: bug fixes and new features. |
+
+## Deciding the number
+
+Every pull request includes a category label, which is enforced by [pr-label.yml](.github/workflows/pr-label.yml). The `breaking` label determines the version number.
+
+From the `code` directory, use this command to list every breaking pull request that was merged since the last release and indicate which number to bump:
+
+```bash
+make release-check
+```
+
+To view the full release notes for a version before tagging it, without creating anything:
+
+```bash
+make release-notes version=2.11.0
+```
+
+A `## Breaking Changes` section means the release is a minor version. If this section is absent, the release is a patch.
+
+[release.yml](.github/workflows/release.yml) performs the same check and stops the release process before anything is built if breaking pull requests were merged but the minor version did not increment. It issues a warning but continues if the minor version moves without a breaking pull request leading it.
+
+Examples of breaking changes:
+
+- A migration that drops or rewrites data, preventing rollback to the previous version
+- Renaming or removing an environment variable
+- Dropping a platform, architecture, installer, or database provider
+- A default value that alters how an existing configuration interacts with user data
+- A setting whose unit or interpretation changes and cannot be altered by a migration
+- Dropping a download client or *arr application, or increasing the minimum supported version
+- A change to the public REST API (e.g., the `stats` endpoint)
+
+Examples of non-breaking changes:
+
+- A migration that simply adds columns or tables
+- Renaming any value stored in the database and configured through the UI, accompanied by a migration
+- Any change to the private REST API, which is intended only for the UI
+- Modifications to the Web UI layout, internal structure, or logging
+
+## Auditing migrations before a release
+
+The easiest breaking change to overlook is a migration that prevents rollback. To see the migrations added since the previous tag:
+
+```bash
+git diff --name-only <last-tag>..main -- '*/Migrations/**' \
+  | grep -v -e Designer -e Snapshot \
+  | xargs grep -l 'DropColumn\|DropTable\|AlterColumn\|RenameColumn\|DeleteData\|migrationBuilder\.Sql'
+```
+
+Only `Up()` matters, since every migration drops things in `Down()` by definition, leading to false positives in that grep.
+
+Additive changes are safe. `AddColumn` and `CreateTable` allow previous versions to start. However, a conversion or rewrite does not.
+
+## Release process
+
+Tag pushes that match `v*.*.*` trigger [release.yml](.github/workflows/release.yml).
+
+```bash
+git tag v2.10.0
+git push origin v2.10.0
+```
+
+### Release notes
+
+GitHub generates notes from the pull requests merged since the last tag, grouped into sections by label according to [release.yml](.github/release.yml):
+
+| Label | Section |
+| --- | --- |
+| `breaking` | Breaking Changes |
+| `enhancement` | Features |
+| `bug` | Bug Fixes |
+| `documentation` | Documentation |
+| `chore` | Maintenance |
+
+The status check for `Require category label` is mandatory on `main`, so a missing label will be caught before merging. Labels added after merging still apply because notes are generated at release time.

blacklist

@@ -1,11 +1,27 @@
 *(sample).*
+*sample.avchd
+*sample.avi
+*sample.mkv
+*sample.mov
+*sample.mp4
+*sample.webm
+*sample.wmv
+*.000
+*.001
+*.002
+*.004
 *.0xe
 *.73k
 *.73p
 *.7z
+*.7z.001
+*.7z.002
 *.89k
 *.89z
 *.8ck
+*.a00
+*.a01
+*.a02
 *.a7r
 *.ac
 *.acc
@@ -21,8 +37,11 @@
 *.ahk
 *.ai
 *.aif
+*.ain
 *.air
 *.alz
+*.ana
+*.apex
 *.api
 *.apk
 *.app
@@ -30,15 +49,28 @@
 *.applescript
 *.application
 *.appx
+*.apz
+*.ar
 *.arc
+*.archiver
+*.arduboy
+*.arh
+*.ari
 *.arj
+*.ark
 *.arscript
 *.asb
+*.asice
 *.asp
 *.aspx
 *.aspx-exe
 *.atmx
+*.ayt
 *.azw2
+*.b1
+*.b6z
+*.b64
+*.ba
 *.ba_
 *.bak
 *.bas
@@ -46,26 +78,48 @@
 *.bat
 *.bdjo
 *.bdmv
+*.bdoc
 *.beam
+*.bh
 *.bin
 *.bmp
 *.bms
+*.bndl
 *.bns
+*.boo
 *.bsa
 *.btm
+*.bundle
+*.bz
 *.bz2
+*.bza
+*.bzabw
+*.bzip
+*.bzip2
 *.c
+*.c00
+*.c01
+*.c02
+*.c10
 *.cab
 *.caction
+*.car
+*.cb7
+*.cba
+*.cbr
+*.cbt
+*.cbz
 *.cci
 *.cda
 *.cdb
+*.cdz
 *.cel
 *.celx
 *.cfs
 *.cgi
 *.cheat
 *.chm
+*.cit
 *.ckpt
 *.cla
 *.class
@@ -75,9 +129,15 @@
 *.coffee
 *.com
 *.command
+*.comppkg.hauptwerk.rar
+*.comppkg_hauptwerk_rar
+*.conda
 *.conf
 *.config
+*.cp9
+*.cpgz
 *.cpl
+*.cpt
 *.crt
 *.cs
 *.csh
@@ -85,17 +145,27 @@
 *.csproj
 *.css
 *.csv
+*.ctx
+*.ctz
 *.cue
 *.cur
+*.cxarchive
 *.cyw
+*.czip
 *.daemon
+*.daf
+*.dar
 *.dat
 *.data-00000-of-00001
 *.db
+*.dd
 *.deamon
 *.deb
 *.dek
+*.dgc
+*.dist
 *.diz
+*.dl_
 *.dld
 *.dll
 *.dmc
@@ -112,19 +182,27 @@
 *.dw
 *.dword
 *.dxl
+*.dz
 *.e_e
 *.ear
 *.ebacmd
 *.ebm
 *.ebs
 *.ebs2
+*.ecar
 *.ecf
+*.ecs
+*.ecsbx
+*.edz
+*.efw
+*.egg
 *.eham
 *.elf
 *.elf-so
 *.email
 *.emu
 *.epk
+*.epi
 *.es
 *.esh
 *.etc
@@ -140,36 +218,62 @@
 *.exz
 *.ezs
 *.ezt
+*.f
+*.f3z
 *.fas
 *.fba
+*.fcx
 *.fky
 *.flac
 *.flatpak
 *.flv
+*.fp8
 *.fpi
 *.frs
 *.fxp
+*.fzpz
 *.gadget
+*.gar
 *.gat
+*.gca
 *.gif
 *.gifv
 *.gm9
+*.gmz
 *.gpe
 *.gpu
 *.gs
 *.gz
+*.gz2
+*.gza
+*.gzi
+*.gzip
 *.h5
+*.ha
 *.ham
+*.hbc
+*.hbc2
+*.hbe
 *.hex
+*.hki
+*.hki1
+*.hki2
+*.hki3
 *.hlp
 *.hms
 *.hpf
+*.hpk
+*.hpkg
 *.hta
 *.hta-psh
 *.htaccess
 *.htm
 *.html
+*.htmi
+*.hyp
+*.iadproj
 *.icd
+*.ice
 *.icns
 *.ico
 *.idx
@@ -182,17 +286,27 @@
 *.ins
 *.ipa
 *.ipf
+*.ipg
 *.ipk
 *.ipsw
 *.iqylink
+*.ish
 *.iso
 *.isp
 *.isu
+*.isx
 *.ita
+*.ize
 *.izh
 *.izma ace
+*.j
 *.jar
+*.jar.pack
 *.java
+*.jex
+*.jgz
+*.jhh
+*.jic
 *.jpeg
 *.jpg
 *.js
@@ -201,27 +315,51 @@
 *.jse
 *.jsf
 *.json
+*.jsonlz4
 *.jsp
 *.jsx
+*.kextraction
+*.kgb
 *.kix
 *.ksh
+*.ksp
+*.kwgt
 *.kx
+*.kz
+*.layout
+*.lbr
 *.lck
 *.ldb
+*.lemon
+*.lha
+*.lhzd
 *.lib
+*.libzip
 *.link
 *.lnk
 *.lo
 *.lock
 *.log
 *.loop-vbs
+*.lpkg
+*.lqr
 *.ls
+*.lz
+*.lz4
+*.lzh
+*.lzm
+*.lzma
+*.lzo
+*.lzr
+*.lzx
 *.m3u
 *.m4a
 *.mac
 *.macho
 *.mamc
 *.manifest
+*.mar
+*.mbz
 *.mcr
 *.md
 *.mda
@@ -232,22 +370,29 @@
 *.mdt
 *.mel
 *.mem
+*.memo
 *.meta
 *.mgm
 *.mhm
 *.mht
 *.mhtml
 *.mid
+*.mint
 *.mio
 *.mlappinstall
+*.mlproj
 *.mlx
 *.mm
 *.mobileconfig
 *.model
 *.moo
+*.mou
+*.movpkg
+*.mozlz4
 *.mp3
 *.mpa
 *.mpk
+*.mpkg
 *.mpls
 *.mrc
 *.mrp
@@ -266,41 +411,79 @@
 *.msp
 *.mst
 *.msu
+*.mxc
 *.mxe
+*.mzp
 *.n
+*.nar
 *.ncl
 *.net
+*.nex
 *.nexe
 *.nfo
+*.npk
 *.nrg
 *.num
+*.nz
 *.nzb.bz2
 *.nzb.gz
 *.nzbs
+*.oar
 *.ocx
+*.odlgz
 *.odt
+*.opk
 *.ore
+*.osf
 *.ost
 *.osx
 *.osx-app
 *.otm
 *.out
 *.ova
+*.oz
 *.p
+*.p01
+*.p19
+*.p7z
+*.pa
+*.pack.gz
+*.package
+*.pae
 *.paf
 *.pak
+*.paq6
+*.paq7
+*.paq8
+*.paq8f
+*.paq8l
+*.paq8p
+*.par
+*.par2
+*.pax
 *.pb
+*.pbi
 *.pcd
+*.pcv
 *.pdb
 *.pdf
 *.pea
 *.perl
+*.pet
 *.pex
+*.pf
 *.phar
 *.php
 *.php5
 *.pif
+*.pim
+*.pima
+*.pit
+*.piz
 *.pkg
+*.pkg.tar.xz
+*.pkg.tar.zst
+*.pkz
 *.pl
 *.plsc
 *.plx
@@ -318,6 +501,7 @@
 *.pptx
 *.prc
 *.prg
+*.prs
 *.ps
 *.ps1
 *.ps1xml
@@ -333,9 +517,16 @@
 *.psh-reflection
 *.psm1
 *.pst
+*.psz
 *.pt
+*.pup
+*.puz
 *.pvd
+*.pvmp
+*.pvmz
+*.pwa
 *.pwc
+*.pxl
 *.pxo
 *.py
 *.pyc
@@ -343,8 +534,20 @@
 *.pyo
 *.python
 *.pyz
+*.q
+*.qda
 *.qit
 *.qpx
+*.r0
+*.r00
+*.r01
+*.r02
+*.r03
+*.r04
+*.r1
+*.r2
+*.r21
+*.r30
 *.ram
 *.rar
 *.raw
@@ -355,22 +558,35 @@
 *.reg
 *.resources
 *.resx
+*.rev
 *.rfs
 *.rfu
 *.rgs
+*.rk
 *.rm
+*.rnc
 *.rox
+*.rp9
 *.rpg
 *.rpj
 *.rpm
+*.rss
 *.ruby
 *.run
 *.rxe
+*.rz
+*.s00
+*.s01
+*.s02
+*.s09
 *.s2a
+*.s7z
 *.sample
 *.sapk
+*.sar
 *.savedmodel
 *.sbs
+*.sbx
 *.sca
 *.scar
 *.scb
@@ -380,42 +596,86 @@
 *.scr
 *.script
 *.sct
+*.sdc
+*.sdn
+*.sdoc
+*.sdocx
+*.sea
 *.seed
+*.sen
 *.server
 *.service
+*.sfg
+*.sfm
+*.sfs
 *.sfv
+*.sfx
 *.sh
+*.shar
 *.shb
 *.shell
+*.shk
 *.shortcut
+*.shr
 *.shs
 *.shtml
+*.sifz
+*.sipa
 *.sit
 *.sitx
 *.sk
 *.sldm
 *.sln
 *.smm
+*.smpf
 *.snap
+*.snagitstamps
+*.snappy
+*.snb
 *.snd
+*.snz
+*.spa
+*.spd
+*.spl
+*.spm
 *.spr
+*.spt
 *.sql
+*.sqf
 *.sqx
+*.sqz
 *.srec
+*.srep
 *.srt
 *.ssm
+*.stg
+*.stkdoodlz
+*.stproj
 *.sts
 *.sub
 *.svg
 *.swf
+*.sy_
 *.sys
 *.tar
+*.tar.bz2
 *.tar.gz
+*.tar.gz2
+*.tar.lz
+*.tar.lzma
+*.tar.xz
+*.tar.z
+*.tar.zip
+*.taz
 *.tbl
 *.tbz
+*.tbz2
 *.tcp
+*.tcx
 *.text
 *.tf
+*.tg
+*.tgs
 *.tgz
 *.thm
 *.thmx
@@ -424,19 +684,35 @@
 *.tif
 *.tiff
 *.tipa
+*.tlz
+*.tlzma
 *.tmp
 *.tms
 *.toast
 *.torrent
 *.tpk
+*.tpsr
+*.trs
 *.txt
+*.tx_
+*.txz
+*.tz
+*.tzst
 *.u3p
+*.ubz
+*.uc2
 *.udf
+*.ufdr
+*.ufs.uzip
+*.uha
 *.upk
 *.upx
 *.url
+*.uue
 *.uvm
 *.uw8
+*.uzed
+*.uzip
 *.vb
 *.vba
 *.vba-exe
@@ -448,26 +724,46 @@
 *.vbscript 
 *.vcd
 *.vdo
+*.vem
 *.vexe
+*.vfs
 *.vhd
 *.vhdx
+*.vib
+*.vip
 *.vlx
 *.vm
+*.vmcz
 *.vmdk
+*.vms
 *.vob
 *.vocab
+*.voca
+*.vpk
 *.vpm
+*.vrpackage
+*.vsi
+*.vwi
 *.vxp
+*.wa
+*.wacz
+*.waff
 *.war
+*.wastickers
 *.wav
 *.wbk
 *.wcm
+*.wdz
 *.webm
+*.whl
+*.wick
 *.widget
 *.wim
 *.wiz
+*.wlb
 *.wma
 *.workflow
+*.wot
 *.wpk
 *.wpl
 *.wpm
@@ -476,14 +772,26 @@
 *.wsc
 *.wsf
 *.wsh
+*.wux
 *.x86
 *.x86_64
 *.xaml
 *.xap
+*.xapk
+*.xar
 *.xbap
 *.xbe
+*.xcf.bz2
+*.xcf.gz
+*.xcf.xz
+*.xcfbz2
+*.xcfgz
+*.xcfxz
 *.xex
+*.xez
+*.xfp
 *.xig
+*.xip
 *.xla
 *.xlam
 *.xll
@@ -496,24 +804,47 @@
 *.xltb
 *.xltm
 *.xlw
+*.xmcdz
 *.xml
+*.xoj
+*.xopp
 *.xqt
 *.xrt
+*.xx
 *.xys
 *.xz
+*.xzm
+*.y
+*.yc
 *.ygh
+*.yz1
 *.z
+*.z00
+*.z01
+*.z02
+*.z03
+*.z04
+*.zabw
+*.zap
+*.zed
+*.zfsendtotarget
+*.zhelp
+*.zi
+*.zi_
+*.zim
 *.zip
 *.zipx
+*.zix
+*.zl
 *.zl9
 *.zoo
-*sample.avchd
-*sample.avi
-*sample.mkv
-*sample.mov
-*sample.mp4
-*sample.webm
-*sample.wmv
+*.zpaq
+*.zpi
+*.zsplit
+*.zst
+*.zw
+*.zwi
+*.zz
 Trailer.*
 VOSTFR
 api

blacklist_permissive

@@ -1,52 +1,410 @@
+*.000
+*.001
+*.002
+*.004
+*.7z
+*.7z.001
+*.7z.002
+*.a00
+*.a01
+*.a02
+*.ace
+*.ain
+*.alz
+*.ana
+*.apex
 *.apk
+*.apz
+*.ar
+*.arc
+*.archiver
+*.arduboy
+*.arh
+*.ari
 *.arj
+*.ark
+*.asice
+*.ayt
+*.b1
+*.b6z
+*.b64
+*.ba
 *.bat
+*.bdoc
+*.bh
 *.bin
 *.bmp
+*.bndl
+*.boo
+*.bundle
+*.bz
+*.bz2
+*.bza
+*.bzabw
+*.bzip
+*.bzip2
+*.c00
+*.c01
+*.c02
+*.c10
+*.car
+*.cb7
+*.cba
+*.cbr
+*.cbt
+*.cbz
+*.cdz
+*.cit
 *.cmd
 *.com
+*.comppkg.hauptwerk.rar
+*.comppkg_hauptwerk_rar
+*.conda
+*.cp9
+*.cpgz
+*.cpt
+*.ctx
+*.ctz
+*.cxarchive
+*.czip
+*.daf
+*.dar
 *.db
+*.dd
+*.deb
+*.dgc
+*.dist
 *.diz
+*.dl_
 *.dll
 *.dmg
+*.dz
+*.ecar
+*.ecs
+*.ecsbx
+*.edz
+*.efw
+*.egg
+*.epi
 *.etc
 *.exe
+*.f
+*.f3z
+*.fcx
+*.fp8
+*.fzpz
+*.gar
+*.gca
 *.gif
+*.gmz
+*.gz
+*.gz2
+*.gza
+*.gzi
+*.gzip
+*.ha
+*.hbc
+*.hbc2
+*.hbe
+*.hki
+*.hki1
+*.hki2
+*.hki3
+*.hpk
+*.hpkg
 *.htm
 *.html
+*.htmi
+*.hyp
+*.iadproj
+*.ice
 *.ico
 *.ini
+*.ipg
+*.ipk
+*.ish
 *.iso
+*.isx
+*.ita
+*.ize
+*.j
 *.jar
+*.jar.pack
+*.jex
+*.jgz
+*.jhh
+*.jic
 *.jpg
 *.js
+*.jsonlz4
+*.kextraction
+*.kgb
+*.ksp
+*.kwgt
+*.kz
+*.layout
+*.lbr
+*.lemon
+*.lha
+*.lhzd
+*.libzip
 *.link
 *.lnk
+*.lpkg
+*.lqr
+*.lz
+*.lz4
+*.lzh
+*.lzm
+*.lzma
+*.lzo
+*.lzr
+*.lzx
+*.mar
+*.mbz
+*.md
+*.memo
+*.mint
+*.mlproj
+*.mou
+*.movpkg
+*.mozlz4
+*.mpkg
 *.msi
+*.mxc
+*.mzp
+*.nar
+*.nex
 *.nfo
+*.npk
+*.nz
+*.oar
+*.odlgz
+*.opk
+*.osf
+*.oz
+*.p01
+*.p19
+*.p7z
+*.pa
+*.pack.gz
+*.package
+*.pae
+*.pak
+*.paq6
+*.paq7
+*.paq8
+*.paq8f
+*.paq8l
+*.paq8p
+*.par
+*.par2
+*.pax
+*.pbi
+*.pcv
+*.pea
 *.perl
+*.pet
+*.pf
 *.php
+*.pim
+*.pima
+*.pit
+*.piz
+*.pkg
+*.pkg.tar.xz
+*.pkg.tar.zst
+*.pkz
 *.pl
 *.png
+*.prs
 *.ps1
 *.psc1
 *.psd1
 *.psm1
+*.psz
+*.pup
+*.puz
+*.pvmp
+*.pvmz
+*.pwa
+*.pxl
 *.py
 *.pyd
+*.q
+*.qda
+*.r0
+*.r00
+*.r01
+*.r02
+*.r03
+*.r04
+*.r1
+*.r2
+*.r21
+*.r30
+*.rar
 *.rb
 *.readme
 *.reg
+*.rev
+*.rk
+*.rnc
+*.rp9
+*.rpm
+*.rss
 *.run
+*.rz
+*.s00
+*.s01
+*.s02
+*.s09
+*.s7z
+*.sar
+*.sbx
 *.scr
+*.sdc
+*.sdn
+*.sdoc
+*.sdocx
+*.sea
+*.sen
+*.sfg
+*.sfm
+*.sfs
+*.sfx
 *.sh
+*.shar
+*.shk
+*.shr
+*.sifz
+*.sipa
+*.sit
+*.sitx
+*.smpf
+*.snagitstamps
+*.snappy
+*.snb
+*.snz
+*.spa
+*.spd
+*.spl
+*.spm
+*.spt
 *.sql
+*.sqf
+*.sqx
+*.sqz
+*.srep
+*.stg
+*.stkdoodlz
+*.stproj
+*.sy_
+*.tar.bz2
+*.tar.gz
+*.tar.gz2
+*.tar.lz
+*.tar.lzma
+*.tar.xz
+*.tar.z
+*.tar.zip
+*.taz
+*.tbz
+*.tbz2
+*.tcx
 *.text
+*.tg
+*.tgs
+*.tgz
 *.thumb
+*.tlz
+*.tlzma
 *.torrent
+*.tpsr
+*.trs
 *.txt
+*.tx_
+*.txz
+*.tz
+*.tzst
+*.ubz
+*.uc2
+*.ufdr
+*.ufs.uzip
+*.uha
 *.url
+*.uue
+*.uvm
+*.uzed
+*.uzip
 *.vbs
+*.vem
+*.vfs
+*.vib
+*.vip
+*.vmcz
+*.vms
+*.voca
+*.vpk
+*.vrpackage
+*.vsi
+*.vwi
+*.wa
+*.wacz
+*.waff
+*.war
+*.wastickers
+*.wdz
+*.whl
+*.wick
+*.wlb
+*.wot
 *.wsf
+*.wux
+*.xapk
+*.xar
+*.xcf.bz2
+*.xcf.gz
+*.xcf.xz
+*.xcfbz2
+*.xcfgz
+*.xcfxz
+*.xez
+*.xfp
+*.xip
 *.xml
-*.zipx
+*.xmcdz
+*.xoj
+*.xopp
+*.xx
+*.xz
+*.xzm
+*.y
+*.yc
+*.yz1
+*.z
+*.z00
+*.z01
+*.z02
+*.z03
+*.z04
+*.zabw
+*.zap
+*.zed
+*.zfsendtotarget
+*.zhelp
+*.zi
+*.zi_
+*.zim
+*.zip
+*.zipx
+*.zix
+*.zl
+*.zoo
+*.zpaq
+*.zpi
+*.zsplit
+*.zst
+*.zw
+*.zwi
+*.zz

chart/values.yaml

@@ -1,162 +0,0 @@
-deployment:
-  replicas: 1
-  strategy:
-    type: RollingUpdate
-    maxSurge: 1
-    maxUnavailable: 0
-  containers:
-    - name: qbit
-      image:
-        repository: ghcr.io/flmorg/cleanuperr
-        tag: latest
-      env:
-        - name: DRY_RUN
-          value: "false"
-
-        - name: LOGGING__LOGLEVEL
-          value: Verbose
-        - name: LOGGING__FILE__ENABLED
-          value: "true"
-        - name: LOGGING__FILE__PATH
-          value: /var/logs
-        - name: LOGGING__ENHANCED
-          value: "true"
-
-        - name: TRIGGERS__QUEUECLEANER
-          value: 0 0/5 * * * ?
-        - name: TRIGGERS__CONTENTBLOCKER
-          value: 0 0/5 * * * ?
-
-        - name: QUEUECLEANER__ENABLED
-          value: "true"
-        - name: QUEUECLEANER__RUNSEQUENTIALLY
-          value: "true"
-        - name: QUEUECLEANER__IMPORT_FAILED_MAX_STRIKES
-          value: "3"
-        - name: QUEUECLEANER__IMPORT_FAILED_IGNORE_PRIVATE
-          value: "false"
-        - name: QUEUECLEANER__IMPORT_FAILED_DELETE_PRIVATE
-          value: "false"
-        - name: QUEUECLEANER__STALLED_MAX_STRIKES
-          value: "3"
-        - name: QUEUECLEANER__STALLED_IGNORE_PRIVATE
-          value: "false"
-        - name: QUEUECLEANER__STALLED_DELETE_PRIVATE
-          value: "false"
-
-        - name: CONTENTBLOCKER__ENABLED
-          value: "true"
-        - name: CONTENTBLOCKER__IGNORE_PRIVATE
-          value: "true"
-        - name: CONTENTBLOCKER__DELETE_PRIVATE
-          value: "false"
-
-        - name: DOWNLOADCLEANER__ENABLED
-          value: "false"
-
-        - name: DOWNLOAD_CLIENT
-          value: qbittorrent
-        - name: QBITTORRENT__URL
-          value: http://service.qbittorrent-videos.svc.cluster.local
-
-        - name: SONARR__ENABLED
-          value: "true"
-        - name: SONARR__SEARCHTYPE
-          value: Episode
-        - name: SONARR__BLOCK__TYPE
-          value: blacklist
-        - name: SONARR__BLOCK__PATH
-          value: https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist
-        - name: SONARR__INSTANCES__0__URL
-          value: http://service.sonarr-low-res.svc.cluster.local
-        - name: SONARR__INSTANCES__1__URL
-          value: http://service.sonarr-high-res.svc.cluster.local
-
-        - name: RADARR__ENABLED
-          value: "true"
-        - name: RADARR__BLOCK__TYPE
-          value: blacklist
-        - name: RADARR__BLOCK__PATH
-          value: https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist
-        - name: RADARR__INSTANCES__0__URL
-          value: http://service.radarr-low-res.svc.cluster.local
-        - name: RADARR__INSTANCES__1__URL
-          value: http://service.radarr-high-res.svc.cluster.local
-
-        - name: NOTIFIARR__ON_IMPORT_FAILED_STRIKE
-          value: "true"
-        - name: NOTIFIARR__ON_STALLED_STRIKE
-          value: "true"
-        - name: NOTIFIARR__ON_QUEUE_ITEM_DELETED
-          value: "true"
-        - name: NOTIFIARR__ON_DOWNLOAD_CLEANED
-          value: "true"
-        - name: NOTIFIARR__CHANNEL_ID
-          value: "1340708411259748413"
-      envFromSecret:
-        - secretName: qbit-auth
-          envs:
-            - name: QBITTORRENT__USERNAME
-              key: QBIT_USER
-            - name: QBITTORRENT__PASSWORD
-              key: QBIT_PASS
-        - secretName: sonarr-auth
-          envs:
-            - name: SONARR__INSTANCES__0__APIKEY
-              key: SNRL_API_KEY
-            - name: SONARR__INSTANCES__1__APIKEY
-              key: SNRH_API_KEY
-        - secretName: radarr-auth
-          envs:
-            - name: RADARR__INSTANCES__0__APIKEY
-              key: RDRL_API_KEY
-            - name: RADARR__INSTANCES__1__APIKEY
-              key: RDRH_API_KEY
-        - secretName: notifiarr-auth
-          envs:
-            - name: NOTIFIARR__API_KEY
-              key: API_KEY
-      resources:
-        requests:
-          cpu: 0m
-          memory: 0Mi
-        limits:
-          cpu: 1000m
-          memory: 1000Mi
-      volumeMounts:
-        - name: storage
-          mountPath: /var/logs
-          subPath: cleanuperr/logs
-  volumes:
-    - name: storage
-      type: pvc
-      typeName: storage-pvc
-
-pvcs:
-  - name: storage-pvc
-    storageClassName: local-path-persistent
-    accessModes:
-      - ReadWriteOnce
-    size: 1Gi
-    volumeMode: Filesystem
-
-vaultSecrets:
-  - name: qbit-auth
-    path: secrets/qbittorrent
-    templates:
-      QBIT_USER: "{% .Secrets.username %}"
-      QBIT_PASS: "{% .Secrets.password %}"
-  - name: radarr-auth
-    path: secrets/radarr
-    templates:
-      RDRL_API_KEY: "{% .Secrets.low_api_key %}"
-      RDRH_API_KEY: "{% .Secrets.high_api_key %}"
-  - name: sonarr-auth
-    path: secrets/sonarr
-    templates:
-      SNRL_API_KEY: "{% .Secrets.low_api_key %}"
-      SNRH_API_KEY: "{% .Secrets.high_api_key %}"
-  - name: notifiarr-auth
-    path: secrets/notifiarr
-    templates:
-      API_KEY: "{% .Secrets.passthrough_api_key %}"

code/.dockerignore

@@ -0,0 +1,87 @@
+# Documentation
+*.md
+docs/
+
+# Version control
+.git/
+.gitignore
+
+# IDE files
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Node.js
+frontend/node_modules/
+frontend/dist/
+frontend/.angular/
+
+# .NET
+backend/bin/
+backend/obj/
+backend/*/bin/
+backend/*/obj/
+backend/.vs/
+
+# Build artifacts
+artifacts/
+dist/
+
+# Test files
+backend/**/*Tests/
+backend/**/Tests/
+
+# Development files
+docker-compose*.yml
+test/ 
+
+# ================================
+# Node and build output
+# ================================
+node_modules
+dist
+out-tsc
+.angular
+.cache
+.tmp
+
+# ================================
+# Testing & Coverage
+# ================================
+coverage
+jest
+cypress
+cypress/screenshots
+cypress/videos
+reports
+playwright-report
+.vite
+.vitepress
+
+# ================================
+# Environment & log files
+# ================================
+*.env*
+!*.env.production
+*.log
+*.tsbuildinfo
+
+# ================================
+# Docker & local orchestration
+# ================================
+Dockerfile
+Dockerfile.*
+.dockerignore
+docker-compose.yml
+docker-compose*.yml
+
+# ================================
+# Miscellaneous
+# ================================
+*.bak
+*.old

code/Common/Attributes/DryRunSafeguardAttribute.cs

@@ -1,6 +0,0 @@
-namespace Common.Attributes;
-
-[AttributeUsage(AttributeTargets.Method, Inherited = true)]
-public class DryRunSafeguardAttribute : Attribute
-{
-}

code/Common/Common.csproj

@@ -1,14 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-    <PropertyGroup>
-        <TargetFramework>net9.0</TargetFramework>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <Nullable>enable</Nullable>
-    </PropertyGroup>
-
-    <ItemGroup>
-      <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="9.0.2" />
-      <PackageReference Include="Serilog" Version="4.2.0" />
-    </ItemGroup>
-
-</Project>

code/Common/Configuration/Arr/ArrConfig.cs

@@ -1,23 +0,0 @@
-using Common.Configuration.ContentBlocker;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.Arr;
-
-public abstract record ArrConfig
-{
-    public required bool Enabled { get; init; }
-
-    public Block Block { get; init; } = new();
-
-    [ConfigurationKeyName("IMPORT_FAILED_MAX_STRIKES")]
-    public short ImportFailedMaxStrikes { get; init; } = -1;
-    
-    public required List<ArrInstance> Instances { get; init; }
-}
-
-public readonly record struct Block
-{
-    public BlocklistType Type { get; init; }
-    
-    public string? Path { get; init; }
-}

code/Common/Configuration/Arr/ArrInstance.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed class ArrInstance
-{
-    public required Uri Url { get; set; }
-    
-    public required string ApiKey { get; set; }
-}

code/Common/Configuration/Arr/LidarrConfig.cs

@@ -1,6 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed record LidarrConfig : ArrConfig
-{
-    public const string SectionName = "Lidarr";
-}

code/Common/Configuration/Arr/RadarrConfig.cs

@@ -1,6 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed record RadarrConfig : ArrConfig
-{
-    public const string SectionName = "Radarr";
-}

code/Common/Configuration/Arr/SonarrConfig.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed record SonarrConfig : ArrConfig
-{
-    public const string SectionName = "Sonarr";
-    
-    public SonarrSearchType SearchType { get; init; }
-}

code/Common/Configuration/Arr/SonarrSearchType.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public enum SonarrSearchType
-{
-    Episode,
-    Season,
-    Series
-}

code/Common/Configuration/ContentBlocker/ContentBlockerConfig.cs

@@ -1,23 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.ContentBlocker;
-
-public sealed record ContentBlockerConfig : IJobConfig, IIgnoredDownloadsConfig
-{
-    public const string SectionName = "ContentBlocker";
-    
-    public required bool Enabled { get; init; }
-    
-    [ConfigurationKeyName("IGNORE_PRIVATE")]
-    public bool IgnorePrivate { get; init; }
-    
-    [ConfigurationKeyName("DELETE_PRIVATE")]
-    public bool DeletePrivate { get; init; }
-
-    [ConfigurationKeyName("IGNORED_DOWNLOADS_PATH")]
-    public string? IgnoredDownloadsPath { get; init; }
-    
-    public void Validate()
-    {
-    }
-}

code/Common/Configuration/DownloadCleaner/CleanCategory.cs

@@ -1,45 +0,0 @@
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadCleaner;
-
-public sealed record CleanCategory : IConfig
-{
-    public required string Name { get; init; }
-
-    /// <summary>
-    /// Max ratio before removing a download.
-    /// </summary>
-    [ConfigurationKeyName("MAX_RATIO")]
-    public required double MaxRatio { get; init; } = -1;
-
-    /// <summary>
-    /// Min number of hours to seed before removing a download, if the ratio has been met.
-    /// </summary>
-    [ConfigurationKeyName("MIN_SEED_TIME")]
-    public required double MinSeedTime { get; init; } = 0;
-
-    /// <summary>
-    /// Number of hours to seed before removing a download.
-    /// </summary>
-    [ConfigurationKeyName("MAX_SEED_TIME")]
-    public required double MaxSeedTime { get; init; } = -1;
-
-    public void Validate()
-    {
-        if (string.IsNullOrWhiteSpace(Name))
-        {
-            throw new ValidationException($"{nameof(Name)} can not be empty");
-        }
-
-        if (MaxRatio < 0 && MaxSeedTime < 0)
-        {
-            throw new ValidationException($"both {nameof(MaxRatio)} and {nameof(MaxSeedTime)} are disabled");
-        }
-
-        if (MinSeedTime < 0)
-        {
-            throw new ValidationException($"{nameof(MinSeedTime)} can not be negative");
-        }
-    }
-}

code/Common/Configuration/DownloadCleaner/DownloadCleanerConfig.cs

@@ -1,71 +0,0 @@
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadCleaner;
-
-public sealed record DownloadCleanerConfig : IJobConfig, IIgnoredDownloadsConfig
-{
-    public const string SectionName = "DownloadCleaner";
-    
-    public bool Enabled { get; init; }
-
-    public List<CleanCategory>? Categories { get; init; }
-
-    [ConfigurationKeyName("DELETE_PRIVATE")]
-    public bool DeletePrivate { get; init; }
-    
-    [ConfigurationKeyName("IGNORED_DOWNLOADS_PATH")]
-    public string? IgnoredDownloadsPath { get; init; }
-
-    [ConfigurationKeyName("UNLINKED_TARGET_CATEGORY")]
-    public string UnlinkedTargetCategory { get; init; } = "cleanuperr-unlinked";
-
-    [ConfigurationKeyName("UNLINKED_USE_TAG")]
-    public bool UnlinkedUseTag { get; init; }
-
-    [ConfigurationKeyName("UNLINKED_IGNORED_ROOT_DIR")]
-    public string UnlinkedIgnoredRootDir { get; init; } = string.Empty;
-    
-    [ConfigurationKeyName("UNLINKED_CATEGORIES")]
-    public List<string>? UnlinkedCategories { get; init; }
-
-    public void Validate()
-    {
-        if (!Enabled)
-        {
-            return;
-        }
-        
-        if (Categories?.GroupBy(x => x.Name).Any(x => x.Count() > 1) is true)
-        {
-            throw new ValidationException("duplicated clean categories found");
-        }
-        
-        Categories?.ForEach(x => x.Validate());
-        
-        if (string.IsNullOrEmpty(UnlinkedTargetCategory))
-        {
-            return;
-        }
-
-        if (UnlinkedCategories?.Count is null or 0)
-        {
-            throw new ValidationException("no unlinked categories configured");
-        }
-
-        if (UnlinkedCategories.Contains(UnlinkedTargetCategory))
-        {
-            throw new ValidationException($"{SectionName.ToUpperInvariant()}__UNLINKED_TARGET_CATEGORY should not be present in {SectionName.ToUpperInvariant()}__UNLINKED_CATEGORIES");
-        }
-
-        if (UnlinkedCategories.Any(string.IsNullOrEmpty))
-        {
-            throw new ValidationException("empty unlinked category filter found");
-        }
-
-        if (!string.IsNullOrEmpty(UnlinkedIgnoredRootDir) && !Directory.Exists(UnlinkedIgnoredRootDir))
-        {
-            throw new ValidationException($"{UnlinkedIgnoredRootDir} root directory does not exist");
-        }
-    }
-}

code/Common/Configuration/DownloadClient/DelugeConfig.cs

@@ -1,24 +0,0 @@
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadClient;
-
-public sealed record DelugeConfig : IConfig
-{
-    public const string SectionName = "Deluge";
-    
-    public Uri? Url { get; init; }
-    
-    [ConfigurationKeyName("URL_BASE")]
-    public string UrlBase { get; init; } = string.Empty;
-    
-    public string? Password { get; init; }
-    
-    public void Validate()
-    {
-        if (Url is null)
-        {
-            throw new ValidationException($"{nameof(Url)} is empty");
-        }
-    }
-}

code/Common/Configuration/DownloadClient/DownloadClientConfig.cs

@@ -1,9 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadClient;
-
-public sealed record DownloadClientConfig
-{
-    [ConfigurationKeyName("DOWNLOAD_CLIENT")]
-    public Enums.DownloadClient DownloadClient { get; init; } = Enums.DownloadClient.None;
-}

code/Common/Configuration/DownloadClient/QBitConfig.cs

@@ -1,26 +0,0 @@
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadClient;
-
-public sealed class QBitConfig : IConfig
-{
-    public const string SectionName = "qBittorrent";
-    
-    public Uri? Url { get; init; }
-    
-    [ConfigurationKeyName("URL_BASE")]
-    public string UrlBase { get; init; } = string.Empty;
-    
-    public string? Username { get; init; }
-    
-    public string? Password { get; init; }
-    
-    public void Validate()
-    {
-        if (Url is null)
-        {
-            throw new ValidationException($"{nameof(Url)} is empty");
-        }
-    }
-}

code/Common/Configuration/DownloadClient/TransmissionConfig.cs

@@ -1,26 +0,0 @@
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadClient;
-
-public record TransmissionConfig : IConfig
-{
-    public const string SectionName = "Transmission";
-    
-    public Uri? Url { get; init; }
-    
-    [ConfigurationKeyName("URL_BASE")]
-    public string UrlBase { get; init; } = "transmission";
-    
-    public string? Username { get; init; }
-    
-    public string? Password { get; init; }
-    
-    public void Validate()
-    {
-        if (Url is null)
-        {
-            throw new ValidationException($"{nameof(Url)} is empty");
-        }
-    }
-}

code/Common/Configuration/General/DryRunConfig.cs

@@ -1,9 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.General;
-
-public sealed record DryRunConfig
-{
-    [ConfigurationKeyName("DRY_RUN")]
-    public bool IsDryRun { get; init; }
-}

code/Common/Configuration/General/HttpConfig.cs

@@ -1,25 +0,0 @@
-using Common.Enums;
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.General;
-
-public sealed record HttpConfig : IConfig
-{
-    [ConfigurationKeyName("HTTP_MAX_RETRIES")]
-    public ushort MaxRetries { get; init; }
-    
-    [ConfigurationKeyName("HTTP_TIMEOUT")]
-    public ushort Timeout { get; init; } = 100;
-    
-    [ConfigurationKeyName("HTTP_VALIDATE_CERT")]
-    public CertificateValidationType CertificateValidation { get; init; } = CertificateValidationType.Enabled;
-
-    public void Validate()
-    {
-        if (Timeout is 0)
-        {
-            throw new ValidationException("HTTP_TIMEOUT must be greater than 0");
-        }
-    }
-}

code/Common/Configuration/General/TriggersConfig.cs

@@ -1,12 +0,0 @@
-namespace Common.Configuration.General;
-
-public sealed class TriggersConfig
-{
-    public const string SectionName = "Triggers";
-    
-    public required string QueueCleaner { get; init; }
-    
-    public required string ContentBlocker { get; init; }
-    
-    public required string DownloadCleaner { get; init; }
-}

code/Common/Configuration/IIgnoredDownloadsConfig.cs

@@ -1,6 +0,0 @@
-namespace Common.Configuration;
-
-public interface IIgnoredDownloadsConfig
-{
-    string? IgnoredDownloadsPath { get; }
-}

code/Common/Configuration/IJobConfig.cs

@@ -1,6 +0,0 @@
-namespace Common.Configuration;
-
-public interface IJobConfig : IConfig
-{
-    bool Enabled { get; init; }
-}

code/Common/Configuration/Logging/FileLogConfig.cs

@@ -1,12 +0,0 @@
-namespace Common.Configuration.Logging;
-
-public class FileLogConfig : IConfig
-{
-    public bool Enabled { get; set; }
-    
-    public string Path { get; set; } = string.Empty;
-    
-    public void Validate()
-    {
-    }
-}

code/Common/Configuration/Logging/LoggingConfig.cs

@@ -1,18 +0,0 @@
-using Serilog.Events;
-
-namespace Common.Configuration.Logging;
-
-public class LoggingConfig : IConfig
-{
-    public const string SectionName = "Logging";
-    
-    public LogEventLevel LogLevel { get; set; }
-    
-    public bool Enhanced { get; set; }
-    
-    public FileLogConfig? File { get; set; }
-    
-    public void Validate()
-    {
-    }
-}

code/Common/Configuration/Notification/NotificationConfig.cs

@@ -1,34 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.Notification;
-
-public abstract record NotificationConfig
-{
-    [ConfigurationKeyName("ON_IMPORT_FAILED_STRIKE")]
-    public bool OnImportFailedStrike { get; init; }
-    
-    [ConfigurationKeyName("ON_STALLED_STRIKE")]
-    public bool OnStalledStrike { get; init; }
-    
-    [ConfigurationKeyName("ON_SLOW_STRIKE")]
-    public bool OnSlowStrike { get; init; }
-    
-    [ConfigurationKeyName("ON_QUEUE_ITEM_DELETED")]
-    public bool OnQueueItemDeleted { get; init; }
-    
-    [ConfigurationKeyName("ON_DOWNLOAD_CLEANED")]
-    public bool OnDownloadCleaned { get; init; }
-    
-    [ConfigurationKeyName("ON_CATEGORY_CHANGED")]
-    public bool OnCategoryChanged { get; init; }
-
-    public bool IsEnabled =>
-        OnImportFailedStrike ||
-        OnStalledStrike ||
-        OnSlowStrike ||
-        OnQueueItemDeleted ||
-        OnDownloadCleaned ||
-        OnCategoryChanged;
-
-    public abstract bool IsValid();
-}

code/Common/Configuration/QueueCleaner/QueueCleanerConfig.cs

@@ -1,119 +0,0 @@
-using Common.CustomDataTypes;
-using Common.Exceptions;
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.QueueCleaner;
-
-public sealed record QueueCleanerConfig : IJobConfig, IIgnoredDownloadsConfig
-{
-    public const string SectionName = "QueueCleaner";
-    
-    public required bool Enabled { get; init; }
-    
-    public required bool RunSequentially { get; init; }
-    
-    [ConfigurationKeyName("IGNORED_DOWNLOADS_PATH")]
-    public string? IgnoredDownloadsPath { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_MAX_STRIKES")]
-    public ushort ImportFailedMaxStrikes { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_IGNORE_PRIVATE")]
-    public bool ImportFailedIgnorePrivate { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_DELETE_PRIVATE")]
-    public bool ImportFailedDeletePrivate { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_IGNORE_PATTERNS")]
-    public IReadOnlyList<string>? ImportFailedIgnorePatterns { get; init; }
-    
-    [ConfigurationKeyName("STALLED_MAX_STRIKES")]
-    public ushort StalledMaxStrikes { get; init; }
-    
-    [ConfigurationKeyName("STALLED_RESET_STRIKES_ON_PROGRESS")]
-    public bool StalledResetStrikesOnProgress { get; init; }
-    
-    [ConfigurationKeyName("STALLED_IGNORE_PRIVATE")]
-    public bool StalledIgnorePrivate { get; init; }
-    
-    [ConfigurationKeyName("STALLED_DELETE_PRIVATE")]
-    public bool StalledDeletePrivate { get; init; }
-    
-    [ConfigurationKeyName("DOWNLOADING_METADATA_MAX_STRIKES")]
-    public ushort DownloadingMetadataMaxStrikes { get; init; }
-    
-    [ConfigurationKeyName("SLOW_MAX_STRIKES")]
-    public ushort SlowMaxStrikes { get; init; }
-    
-    [ConfigurationKeyName("SLOW_RESET_STRIKES_ON_PROGRESS")]
-    public bool SlowResetStrikesOnProgress { get; init; }
-
-    [ConfigurationKeyName("SLOW_IGNORE_PRIVATE")]
-    public bool SlowIgnorePrivate { get; init; }
-    
-    [ConfigurationKeyName("SLOW_DELETE_PRIVATE")]
-    public bool SlowDeletePrivate { get; init; }
-
-    [ConfigurationKeyName("SLOW_MIN_SPEED")]
-    public string SlowMinSpeed { get; init; } = string.Empty;
-    
-    public ByteSize SlowMinSpeedByteSize => string.IsNullOrEmpty(SlowMinSpeed) ? new ByteSize(0) : ByteSize.Parse(SlowMinSpeed);
-    
-    [ConfigurationKeyName("SLOW_MAX_TIME")]
-    public double SlowMaxTime { get; init; }
-    
-    [ConfigurationKeyName("SLOW_IGNORE_ABOVE_SIZE")]
-    public string SlowIgnoreAboveSize { get; init; } = string.Empty;
-    
-    public ByteSize? SlowIgnoreAboveSizeByteSize => string.IsNullOrEmpty(SlowIgnoreAboveSize) ? null : ByteSize.Parse(SlowIgnoreAboveSize);
-    
-    public void Validate()
-    {
-        if (ImportFailedMaxStrikes is > 0 and < 3)
-        {
-            throw new ValidationException($"the minimum value for {SectionName.ToUpperInvariant()}__IMPORT_FAILED_MAX_STRIKES must be 3");
-        }
-
-        if (StalledMaxStrikes is > 0 and < 3)
-        {
-            throw new ValidationException($"the minimum value for {SectionName.ToUpperInvariant()}__STALLED_MAX_STRIKES must be 3");
-        }
-        
-        if (DownloadingMetadataMaxStrikes is > 0 and < 3)
-        {
-            throw new ValidationException($"the minimum value for {SectionName.ToUpperInvariant()}__DOWNLOADING_METADATA_MAX_STRIKES must be 3");
-        }
-        
-        if (SlowMaxStrikes is > 0 and < 3)
-        {
-            throw new ValidationException($"the minimum value for {SectionName.ToUpperInvariant()}__SLOW_MAX_STRIKES must be 3");
-        }
-
-        if (SlowMaxStrikes > 0)
-        {
-            bool isSlowSpeedSet = !string.IsNullOrEmpty(SlowMinSpeed);
-
-            if (isSlowSpeedSet && ByteSize.TryParse(SlowMinSpeed, out _) is false)
-            {
-                throw new ValidationException($"invalid value for {SectionName.ToUpperInvariant()}__SLOW_MIN_SPEED");
-            }
-
-            if (SlowMaxTime < 0)
-            {
-                throw new ValidationException($"invalid value for {SectionName.ToUpperInvariant()}__SLOW_MAX_TIME");
-            }
-
-            if (!isSlowSpeedSet && SlowMaxTime is 0)
-            {
-                throw new ValidationException($"either {SectionName.ToUpperInvariant()}__SLOW_MIN_SPEED or {SectionName.ToUpperInvariant()}__SLOW_MAX_STRIKES must be set");
-            }
-        
-            bool isSlowIgnoreAboveSizeSet = !string.IsNullOrEmpty(SlowIgnoreAboveSize);
-        
-            if (isSlowIgnoreAboveSizeSet && ByteSize.TryParse(SlowIgnoreAboveSize, out _) is false)
-            {
-                throw new ValidationException($"invalid value for {SectionName.ToUpperInvariant()}__SLOW_IGNORE_ABOVE_SIZE");
-            }
-        }
-    }
-}

code/Common/Enums/CertificateValidationType.cs

@@ -1,8 +0,0 @@
-namespace Common.Enums;
-
-public enum CertificateValidationType
-{
-    Enabled = 0,
-    DisabledForLocalAddresses = 1,
-    Disabled = 2
-}

code/Common/Enums/DownloadClient.cs

@@ -1,10 +0,0 @@
-namespace Common.Enums;
-
-public enum DownloadClient
-{
-    QBittorrent,
-    Deluge,
-    Transmission,
-    None,
-    Disabled
-}

code/Common/Helpers/Constants.cs

@@ -1,9 +0,0 @@
-namespace Common.Helpers;
-
-public static class Constants
-{
-    public static readonly TimeSpan TriggerMaxLimit  = TimeSpan.FromHours(6);
-    public static readonly TimeSpan CacheLimitBuffer = TimeSpan.FromHours(2);
-
-    public const string HttpClientWithRetryName = "retry";
-}

code/Dockerfile

@@ -0,0 +1,87 @@
+# Build Angular frontend
+FROM --platform=$BUILDPLATFORM node:26-alpine AS frontend-build
+WORKDIR /app
+
+# Copy package files first for better layer caching
+COPY frontend/package*.json ./
+# Use cache mount for npm to speed up builds
+RUN --mount=type=cache,target=/root/.npm \
+    npm ci && npm install -g @angular/cli
+
+# Copy source code
+COPY frontend/ .
+
+# Build with appropriate base-href and deploy-url
+RUN npm run build
+
+# Build .NET backend
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+ARG TARGETARCH
+ARG VERSION=0.0.1
+ARG PACKAGES_USERNAME
+ARG PACKAGES_PAT
+WORKDIR /app
+EXPOSE 11011
+
+# Copy source code
+COPY backend/ ./backend/
+
+# Add NuGet source
+RUN dotnet nuget add source --username ${PACKAGES_USERNAME} --password ${PACKAGES_PAT} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+
+# Restore and publish with cache mount
+RUN --mount=type=cache,target=/root/.nuget/packages,sharing=locked \
+    dotnet restore ./backend/Cleanuparr.Api/Cleanuparr.Api.csproj -a $TARGETARCH && \
+    dotnet publish ./backend/Cleanuparr.Api/Cleanuparr.Api.csproj \
+    -a $TARGETARCH \
+    -c Release \
+    -o /app/publish \
+    --no-restore \
+    /p:Version=${VERSION} \
+    /p:PublishSingleFile=true \
+    /p:DebugSymbols=false
+
+# Runtime stage
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Install required packages for user management, timezone support, and Python for Apprise CLI
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl \
+    tzdata \
+    gosu \
+    python3 \
+    python3-venv \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create virtual environment and install Apprise CLI
+ENV VIRTUAL_ENV=/opt/apprise-venv
+RUN python3 -m venv $VIRTUAL_ENV
+ENV PATH="$VIRTUAL_ENV/bin:$PATH"
+RUN pip install --no-cache-dir apprise==1.9.6
+
+ENV PUID=1000 \
+    PGID=1000 \
+    UMASK=022 \
+    TZ=Etc/UTC \
+    HTTP_PORTS=11011
+
+# Fix FileSystemWatcher in Docker: https://github.com/dotnet/dotnet-docker/issues/3546
+ENV DOTNET_USE_POLLING_FILE_WATCHER=true
+
+# GC tuning: prefer lower memory footprint over throughput
+ENV DOTNET_GCDynamicAdaptationMode=1 \
+    DOTNET_GCConserveMemory=5 \
+    DOTNET_GCRetainVM=0
+
+WORKDIR /app
+
+# Copy backend
+COPY --from=build /app/publish .
+# Copy frontend to wwwroot
+COPY --from=frontend-build /app/dist/ui/browser ./wwwroot
+# Copy entrypoint script
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["./Cleanuparr"]

code/Domain/Domain.csproj

@@ -1,17 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-    <PropertyGroup>
-        <TargetFramework>net9.0</TargetFramework>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <Nullable>enable</Nullable>
-    </PropertyGroup>
-
-    <ItemGroup>
-      <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
-    </ItemGroup>
-
-    <ItemGroup>
-      <ProjectReference Include="..\Common\Common.csproj" />
-    </ItemGroup>
-
-</Project>

code/Domain/Enums/InstanceType.cs

@@ -1,9 +0,0 @@
-namespace Domain.Enums;
-
-public enum InstanceType
-{
-    Sonarr,
-    Radarr,
-    Lidarr,
-    Readarr
-}

code/Domain/Models/Arr/Blocking/BlockedItem.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Arr.Blocking;
-
-public record BlockedItem
-{
-    public required string Hash { get; init; }
-    
-    public required Uri InstanceUrl { get; init; }
-}

code/Domain/Models/Arr/Blocking/LidarrBlockedItem.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Arr.Blocking;
-
-public sealed record LidarrBlockedItem : BlockedItem
-{
-    public required long AlbumId { get; init; }
-    
-    public required long ArtistId { get; init; }
-}

code/Domain/Models/Arr/Blocking/RadarrBlockedItem.cs

@@ -1,6 +0,0 @@
-namespace Domain.Models.Arr.Blocking;
-
-public sealed record RadarrBlockedItem : BlockedItem
-{
-    public required long MovieId { get; init; }
-}

code/Domain/Models/Arr/Blocking/SonarrBlockedItem.cs

@@ -1,10 +0,0 @@
-namespace Domain.Models.Arr.Blocking;
-
-public sealed record SonarrBlockedItem : BlockedItem
-{
-    public required long EpisodeId { get; init; }
-    
-    public required long SeasonNumber { get; init; }
-    
-    public required long SeriesId { get; init; }
-}

code/Domain/Models/Arr/Queue/Image.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Arr.Queue;
-
-public record Image
-{
-    public required string CoverType { get; init; }
-    
-    public required Uri RemoteUrl { get; init; }
-}

code/Domain/Models/Arr/Queue/LidarrImage.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Arr.Queue;
-
-public record LidarrImage
-{
-    public required string CoverType { get; init; }
-    
-    public required Uri Url { get; init; }
-}

code/Domain/Models/Arr/Queue/QueueListResponse.cs

@@ -1,7 +0,0 @@
-namespace Domain.Models.Arr.Queue;
-
-public record QueueListResponse
-{
-    public required int TotalRecords { get; init; }
-    public required IReadOnlyList<QueueRecord> Records { get; init; }
-}

code/Domain/Models/Arr/Queue/QueueRecord.cs

@@ -1,33 +0,0 @@
-namespace Domain.Models.Arr.Queue;
-
-public sealed record QueueRecord
-{
-    // Sonarr
-    public long SeriesId { get; init; }
-    public long EpisodeId { get; init; }
-    public long SeasonNumber { get; init; }
-    
-    public QueueSeries? Series { get; init; }
-    
-    // Radarr
-    public long MovieId { get; init; }
-    
-    public QueueSeries? Movie { get; init; }
-    
-    // Lidarr
-    public long ArtistId { get; init; }
-    
-    public long AlbumId { get; init; }
-    
-    public QueueAlbum? Album { get; init; }
-    
-    // common
-    public required string Title { get; init; }
-    public string Status { get; init; }
-    public string TrackedDownloadStatus { get; init; }
-    public string TrackedDownloadState { get; init; }
-    public List<TrackedDownloadStatusMessage>? StatusMessages { get; init; }
-    public required string DownloadId { get; init; }
-    public required string Protocol { get; init; }
-    public required long Id { get; init; }
-}

code/Domain/Models/Deluge/Exceptions/DelugeClientException.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Deluge.Exceptions;
-
-public class DelugeClientException : Exception
-{
-    public DelugeClientException(string message) : base(message)
-    {
-    }
-}

code/Domain/Models/Deluge/Request/DelugeRequest.cs

@@ -1,32 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Request;
-
-public class DelugeRequest
-{
-    [JsonProperty(PropertyName = "id")]
-    public int RequestId { get; set; }
-
-    [JsonProperty(PropertyName = "method")]
-    public String Method { get; set; }
-
-    [JsonProperty(PropertyName = "params")]
-    public List<Object> Params { get; set; }
-
-    [JsonIgnore]
-    public NullValueHandling NullValueHandling { get; set; }
-
-    public DelugeRequest(int requestId, String method, params object[] parameters)
-    {
-        RequestId = requestId;
-        Method = method;
-        Params = new List<Object>();
-
-        if (parameters != null)
-        {
-            Params.AddRange(parameters);
-        }
-
-        NullValueHandling = NullValueHandling.Include;
-    }
-}

code/Domain/Models/Deluge/Response/DelugeContents.cs

@@ -1,12 +0,0 @@
-using System.Text.Json.Serialization;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeContents
-{
-    [JsonPropertyName("contents")]
-    public Dictionary<string, DelugeFileOrDirectory>? Contents { get; set; }
-
-    [JsonPropertyName("type")]
-    public string Type { get; set; } // Always "dir" for the root
-}

code/Domain/Models/Deluge/Response/DelugeError.cs

@@ -1,12 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeError
-{
-    [JsonProperty(PropertyName = "message")]
-    public String Message { get; set; }
-
-    [JsonProperty(PropertyName = "code")]
-    public int Code { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeFileOrDirectory.cs

@@ -1,33 +0,0 @@
-using System.Text.Json.Serialization;
-
-namespace Domain.Models.Deluge.Response;
-
-public class DelugeFileOrDirectory
-{
-    [JsonPropertyName("type")]
-    public string Type { get; set; } // "file" or "dir"
-
-    [JsonPropertyName("contents")]
-    public Dictionary<string, DelugeFileOrDirectory>? Contents { get; set; } // Recursive property for directories
-
-    [JsonPropertyName("index")]
-    public required int Index { get; set; }
-
-    [JsonPropertyName("path")]
-    public string Path { get; set; }
-
-    [JsonPropertyName("size")]
-    public int? Size { get; set; }
-
-    [JsonPropertyName("offset")]
-    public int? Offset { get; set; }
-
-    [JsonPropertyName("progress")]
-    public double? Progress { get; set; }
-
-    [JsonPropertyName("priority")]
-    public required int Priority { get; set; }
-
-    [JsonPropertyName("progresses")]
-    public List<double> Progresses { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeResponse.cs

@@ -1,15 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeResponse<T>
-{
-    [JsonProperty(PropertyName = "id")]
-    public int ResponseId { get; set; }
-
-    [JsonProperty(PropertyName = "result")]
-    public T? Result { get; set; }
-
-    [JsonProperty(PropertyName = "error")]
-    public DelugeError? Error { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeTorrent.cs

@@ -1,30 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public record DelugeTorrent
-{
-    [JsonProperty(PropertyName = "comment")]
-    public string Comment { get; set; }
-
-    [JsonProperty(PropertyName = "is_seed")]
-    public bool IsSeed { get; set; }
-
-    [JsonProperty(PropertyName = "hash")]
-    public string Hash { get; set; }
-
-    [JsonProperty(PropertyName = "paused")]
-    public bool Paused { get; set; }
-
-    [JsonProperty(PropertyName = "ratio")]
-    public double Ratio { get; set; }
-
-    [JsonProperty(PropertyName = "message")]
-    public string Message { get; set; }
-
-    [JsonProperty(PropertyName = "name")]
-    public string Name { get; set; }
-
-    [JsonProperty(PropertyName = "label")]
-    public string Label { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeTorrentExtended.cs

@@ -1,110 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeTorrentExtended : DelugeTorrent
-{
-    [JsonProperty(PropertyName = "total_done")]
-    public long TotalDone { get; set; }
-
-    [JsonProperty(PropertyName = "total_payload_download")]
-    public long TotalPayloadDownload { get; set; }
-
-    [JsonProperty(PropertyName = "total_uploaded")]
-    public long TotalUploaded { get; set; }
-
-    [JsonProperty(PropertyName = "next_announce")]
-    public int NextAnnounce { get; set; }
-
-    [JsonProperty(PropertyName = "tracker_status")]
-    public string TrackerStatus { get; set; }
-
-    [JsonProperty(PropertyName = "num_pieces")]
-    public int NumPieces { get; set; }
-
-    [JsonProperty(PropertyName = "piece_length")]
-    public long PieceLength { get; set; }
-
-    [JsonProperty(PropertyName = "is_auto_managed")]
-    public bool IsAutoManaged { get; set; }
-
-    [JsonProperty(PropertyName = "active_time")]
-    public long ActiveTime { get; set; }
-
-    [JsonProperty(PropertyName = "seeding_time")]
-    public long SeedingTime { get; set; }
-
-    [JsonProperty(PropertyName = "time_since_transfer")]
-    public long TimeSinceTransfer { get; set; }
-
-    [JsonProperty(PropertyName = "seed_rank")]
-    public int SeedRank { get; set; }
-
-    [JsonProperty(PropertyName = "last_seen_complete")]
-    public long LastSeenComplete { get; set; }
-
-    [JsonProperty(PropertyName = "completed_time")]
-    public long CompletedTime { get; set; }
-
-    [JsonProperty(PropertyName = "owner")] public string Owner { get; set; }
-
-    [JsonProperty(PropertyName = "public")]
-    public bool Public { get; set; }
-
-    [JsonProperty(PropertyName = "shared")]
-    public bool Shared { get; set; }
-
-    [JsonProperty(PropertyName = "queue")] public int Queue { get; set; }
-
-    [JsonProperty(PropertyName = "total_wanted")]
-    public long TotalWanted { get; set; }
-
-    [JsonProperty(PropertyName = "state")] public string State { get; set; }
-
-    [JsonProperty(PropertyName = "progress")]
-    public float Progress { get; set; }
-
-    [JsonProperty(PropertyName = "num_seeds")]
-    public int NumSeeds { get; set; }
-
-    [JsonProperty(PropertyName = "total_seeds")]
-    public int TotalSeeds { get; set; }
-
-    [JsonProperty(PropertyName = "num_peers")]
-    public int NumPeers { get; set; }
-
-    [JsonProperty(PropertyName = "total_peers")]
-    public int TotalPeers { get; set; }
-
-    [JsonProperty(PropertyName = "download_payload_rate")]
-    public long DownloadPayloadRate { get; set; }
-
-    [JsonProperty(PropertyName = "upload_payload_rate")]
-    public long UploadPayloadRate { get; set; }
-
-    [JsonProperty(PropertyName = "eta")] public long Eta { get; set; }
-
-    [JsonProperty(PropertyName = "distributed_copies")]
-    public float DistributedCopies { get; set; }
-
-    [JsonProperty(PropertyName = "time_added")]
-    public int TimeAdded { get; set; }
-
-    [JsonProperty(PropertyName = "tracker_host")]
-    public string TrackerHost { get; set; }
-
-    [JsonProperty(PropertyName = "download_location")]
-    public string DownloadLocation { get; set; }
-
-    [JsonProperty(PropertyName = "total_remaining")]
-    public long TotalRemaining { get; set; }
-
-    [JsonProperty(PropertyName = "max_download_speed")]
-    public long MaxDownloadSpeed { get; set; }
-
-    [JsonProperty(PropertyName = "max_upload_speed")]
-    public long MaxUploadSpeed { get; set; }
-
-    [JsonProperty(PropertyName = "seeds_peers_ratio")]
-    public float SeedsPeersRatio { get; set; }
-}

code/Domain/Models/Deluge/Response/DownloadStatus.cs

@@ -1,42 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DownloadStatus
-{
-    public string? Hash { get; init; }
-    
-    public string? State { get; init; }
-    
-    public string? Name { get; init; }
-    
-    public ulong Eta { get; init; }
-    
-    [JsonProperty("download_payload_rate")]
-    public long DownloadSpeed { get; init; }
-    
-    public bool Private { get; init; }
-    
-    [JsonProperty("total_size")]
-    public long Size { get; init; }
-    
-    [JsonProperty("total_done")]
-    public long TotalDone { get; init; }
-    
-    public string? Label { get; set; }
-    
-    [JsonProperty("seeding_time")]
-    public long SeedingTime { get; init; }
-    
-    public float Ratio { get; init; }
-    
-    public required IReadOnlyList<Tracker> Trackers { get; init; }
-    
-    [JsonProperty("download_location")]
-    public required string DownloadLocation { get; init; }
-}
-
-public sealed record Tracker
-{
-    public required string Url { get; init; }
-}

code/Domain/Models/Radarr/Movie.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Radarr;
-
-public sealed record Movie
-{
-    public required long Id { get; init; }
-    
-    public required string Title { get; init; }
-}

code/Domain/Models/Sonarr/Series.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Sonarr;
-
-public sealed record Series
-{
-    public required long Id { get; init; }
-            
-    public required string Title { get; init; }
-}

code/Executable/DependencyInjection/ConfigurationDI.cs

@@ -1,27 +0,0 @@
-using Common.Configuration.Arr;
-using Common.Configuration.ContentBlocker;
-using Common.Configuration.DownloadCleaner;
-using Common.Configuration.DownloadClient;
-using Common.Configuration.General;
-using Common.Configuration.Logging;
-using Common.Configuration.QueueCleaner;
-
-namespace Executable.DependencyInjection;
-
-public static class ConfigurationDI
-{
-    public static IServiceCollection AddConfiguration(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .Configure<DryRunConfig>(configuration)
-            .Configure<QueueCleanerConfig>(configuration.GetSection(QueueCleanerConfig.SectionName))
-            .Configure<ContentBlockerConfig>(configuration.GetSection(ContentBlockerConfig.SectionName))
-            .Configure<DownloadCleanerConfig>(configuration.GetSection(DownloadCleanerConfig.SectionName))
-            .Configure<DownloadClientConfig>(configuration)
-            .Configure<QBitConfig>(configuration.GetSection(QBitConfig.SectionName))
-            .Configure<DelugeConfig>(configuration.GetSection(DelugeConfig.SectionName))
-            .Configure<TransmissionConfig>(configuration.GetSection(TransmissionConfig.SectionName))
-            .Configure<SonarrConfig>(configuration.GetSection(SonarrConfig.SectionName))
-            .Configure<RadarrConfig>(configuration.GetSection(RadarrConfig.SectionName))
-            .Configure<LidarrConfig>(configuration.GetSection(LidarrConfig.SectionName))
-            .Configure<LoggingConfig>(configuration.GetSection(LoggingConfig.SectionName));
-}

code/Executable/DependencyInjection/LoggingDI.cs

@@ -1,81 +0,0 @@
-using Common.Configuration.Logging;
-using Domain.Enums;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.DownloadCleaner;
-using Infrastructure.Verticals.QueueCleaner;
-using Serilog;
-using Serilog.Events;
-using Serilog.Templates;
-using Serilog.Templates.Themes;
-
-namespace Executable.DependencyInjection;
-
-public static class LoggingDI
-{
-    public static ILoggingBuilder AddLogging(this ILoggingBuilder builder, IConfiguration configuration)
-    {
-        LoggingConfig? config = configuration.GetSection(LoggingConfig.SectionName).Get<LoggingConfig>();
-
-        if (!string.IsNullOrEmpty(config?.File?.Path) && !Directory.Exists(config.File.Path))
-        {
-            try
-            {
-                Directory.CreateDirectory(config.File.Path);
-            }
-            catch (Exception exception)
-            {
-                throw new Exception($"log file path is not a valid directory | {config.File.Path}", exception);
-            }
-        }
-        
-        LoggerConfiguration logConfig = new();
-        const string jobNameTemplate = "{#if JobName is not null} {Concat('[',JobName,']'),JOB_PAD}{#end}";
-        const string instanceNameTemplate = "{#if InstanceName is not null} {Concat('[',InstanceName,']'),ARR_PAD}{#end}";
-        const string consoleOutputTemplate = $"[{{@t:yyyy-MM-dd HH:mm:ss.fff}} {{@l:u3}}]{jobNameTemplate}{instanceNameTemplate} {{@m}}\n{{@x}}";
-        const string fileOutputTemplate = $"{{@t:yyyy-MM-dd HH:mm:ss.fff zzz}} [{{@l:u3}}]{jobNameTemplate}{instanceNameTemplate} {{@m:lj}}\n{{@x}}";
-        LogEventLevel level = LogEventLevel.Information;
-        List<string> names = [nameof(ContentBlocker), nameof(QueueCleaner), nameof(DownloadCleaner)];
-        int jobPadding = names.Max(x => x.Length) + 2;
-        names = [InstanceType.Sonarr.ToString(), InstanceType.Radarr.ToString(), InstanceType.Lidarr.ToString()];
-        int arrPadding = names.Max(x => x.Length) + 2;
-
-        string consoleTemplate = consoleOutputTemplate
-            .Replace("JOB_PAD", jobPadding.ToString())
-            .Replace("ARR_PAD", arrPadding.ToString());
-        string fileTemplate = fileOutputTemplate
-            .Replace("JOB_PAD", jobPadding.ToString())
-            .Replace("ARR_PAD", arrPadding.ToString());
-
-        if (config is not null)
-        {
-            level = config.LogLevel;
-
-            if (config.File?.Enabled is true)
-            {
-                logConfig.WriteTo.File(
-                    path: Path.Combine(config.File.Path, "cleanuperr-.txt"),
-                    formatter: new ExpressionTemplate(fileTemplate),
-                    fileSizeLimitBytes: 10L * 1024 * 1024,
-                    rollingInterval: RollingInterval.Day,
-                    rollOnFileSizeLimit: true
-                );
-            }
-        }
-
-        Log.Logger = logConfig
-            .MinimumLevel.Is(level)
-            .MinimumLevel.Override("MassTransit", LogEventLevel.Warning)
-            .MinimumLevel.Override("Microsoft.Hosting.Lifetime", LogEventLevel.Information)
-            .MinimumLevel.Override("Microsoft.Extensions.Http", LogEventLevel.Warning)
-            .MinimumLevel.Override("Quartz", LogEventLevel.Warning)
-            .MinimumLevel.Override("System.Net.Http.HttpClient", LogEventLevel.Error)
-            .WriteTo.Console(new ExpressionTemplate(consoleTemplate))
-            .Enrich.FromLogContext()
-            .Enrich.WithProperty("ApplicationName", "cleanuperr")
-            .CreateLogger();
-        
-        return builder
-            .ClearProviders()
-            .AddSerilog();
-    }
-}

code/Executable/DependencyInjection/MainDI.cs

@@ -1,108 +0,0 @@
-using System.Net;
-using Common.Configuration.General;
-using Common.Helpers;
-using Infrastructure.Services;
-using Infrastructure.Verticals.DownloadClient.Deluge;
-using Infrastructure.Verticals.Notifications.Consumers;
-using Infrastructure.Verticals.Notifications.Models;
-using MassTransit;
-using Microsoft.Extensions.Options;
-using Polly;
-using Polly.Extensions.Http;
-
-namespace Executable.DependencyInjection;
-
-public static class MainDI
-{
-    public static IServiceCollection AddInfrastructure(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .AddLogging(builder => builder.ClearProviders().AddConsole())
-            .AddHttpClients(configuration)
-            .AddConfiguration(configuration)
-            .AddMemoryCache(options => {
-                options.ExpirationScanFrequency = TimeSpan.FromMinutes(1);
-            })
-            .AddServices()
-            .AddQuartzServices(configuration)
-            .AddNotifications(configuration)
-            .AddMassTransit(config =>
-            {
-                config.AddConsumer<NotificationConsumer<FailedImportStrikeNotification>>();
-                config.AddConsumer<NotificationConsumer<StalledStrikeNotification>>();
-                config.AddConsumer<NotificationConsumer<SlowStrikeNotification>>();
-                config.AddConsumer<NotificationConsumer<QueueItemDeletedNotification>>();
-                config.AddConsumer<NotificationConsumer<DownloadCleanedNotification>>();
-                config.AddConsumer<NotificationConsumer<CategoryChangedNotification>>();
-
-                config.UsingInMemory((context, cfg) =>
-                {
-                    cfg.ReceiveEndpoint("notification-queue", e =>
-                    {
-                        e.ConfigureConsumer<NotificationConsumer<FailedImportStrikeNotification>>(context);
-                        e.ConfigureConsumer<NotificationConsumer<StalledStrikeNotification>>(context);
-                        e.ConfigureConsumer<NotificationConsumer<SlowStrikeNotification>>(context);
-                        e.ConfigureConsumer<NotificationConsumer<QueueItemDeletedNotification>>(context);
-                        e.ConfigureConsumer<NotificationConsumer<DownloadCleanedNotification>>(context);
-                        e.ConfigureConsumer<NotificationConsumer<CategoryChangedNotification>>(context);
-                        e.ConcurrentMessageLimit = 1;
-                        e.PrefetchCount = 1;
-                    });
-                });
-            });
-    
-    private static IServiceCollection AddHttpClients(this IServiceCollection services, IConfiguration configuration)
-    {
-        // add default HttpClient
-        services.AddHttpClient();
-        
-        HttpConfig config = configuration.Get<HttpConfig>() ?? new();
-        config.Validate();
-
-        // add retry HttpClient
-        services
-            .AddHttpClient(Constants.HttpClientWithRetryName, x =>
-            {
-                x.Timeout = TimeSpan.FromSeconds(config.Timeout);
-            })
-            .ConfigurePrimaryHttpMessageHandler(provider =>
-            {
-                CertificateValidationService service = provider.GetRequiredService<CertificateValidationService>();
-                
-                return new HttpClientHandler
-                {
-                    ServerCertificateCustomValidationCallback = service.ShouldByPassValidationError
-                };
-            })
-            .AddRetryPolicyHandler(config);
-
-        // add Deluge HttpClient
-        services
-            .AddHttpClient(nameof(DelugeService), x =>
-            {
-                x.Timeout = TimeSpan.FromSeconds(config.Timeout);
-            })
-            .ConfigurePrimaryHttpMessageHandler(_ =>
-            {
-                return new HttpClientHandler
-                {
-                    AllowAutoRedirect = true,
-                    UseCookies = true,
-                    CookieContainer = new CookieContainer(),
-                    AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate,
-                    ServerCertificateCustomValidationCallback = (_, _, _, _) => true
-                };
-            })
-            .AddRetryPolicyHandler(config);
-
-        return services;
-    }
-
-    private static IHttpClientBuilder AddRetryPolicyHandler(this IHttpClientBuilder builder, HttpConfig config) =>
-        builder.AddPolicyHandler(
-            HttpPolicyExtensions
-                .HandleTransientHttpError()
-                // do not retry on Unauthorized
-                .OrResult(response => !response.IsSuccessStatusCode && response.StatusCode != HttpStatusCode.Unauthorized)
-                .WaitAndRetryAsync(config.MaxRetries, retryAttempt => TimeSpan.FromSeconds(Math.Pow(2, retryAttempt)))
-        );
-}

code/Executable/DependencyInjection/NotificationsDI.cs

@@ -1,20 +0,0 @@
-using Infrastructure.Verticals.Notifications;
-using Infrastructure.Verticals.Notifications.Apprise;
-using Infrastructure.Verticals.Notifications.Notifiarr;
-
-namespace Executable.DependencyInjection;
-
-public static class NotificationsDI
-{
-    public static IServiceCollection AddNotifications(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .Configure<NotifiarrConfig>(configuration.GetSection(NotifiarrConfig.SectionName))
-            .Configure<AppriseConfig>(configuration.GetSection(AppriseConfig.SectionName))
-            .AddTransient<INotifiarrProxy, NotifiarrProxy>()
-            .AddTransient<INotificationProvider, NotifiarrProvider>()
-            .AddTransient<IAppriseProxy, AppriseProxy>()
-            .AddTransient<INotificationProvider, AppriseProvider>()
-            .AddTransient<INotificationPublisher, NotificationPublisher>()
-            .AddTransient<INotificationFactory, NotificationFactory>()
-            .AddTransient<NotificationService>();
-}

code/Executable/DependencyInjection/QuartzDI.cs

@@ -1,144 +0,0 @@
-using Common.Configuration;
-using Common.Configuration.ContentBlocker;
-using Common.Configuration.DownloadCleaner;
-using Common.Configuration.General;
-using Common.Configuration.QueueCleaner;
-using Common.Helpers;
-using Executable.Jobs;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.DownloadCleaner;
-using Infrastructure.Verticals.Jobs;
-using Infrastructure.Verticals.QueueCleaner;
-using Quartz;
-using Quartz.Spi;
-
-namespace Executable.DependencyInjection;
-
-public static class QuartzDI
-{
-    public static IServiceCollection AddQuartzServices(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .AddQuartz(q =>
-            {
-                TriggersConfig? config = configuration
-                    .GetRequiredSection(TriggersConfig.SectionName)
-                    .Get<TriggersConfig>();
-
-                if (config is null)
-                {
-                    throw new NullReferenceException("triggers configuration is null");
-                }
-
-                q.AddJobs(configuration, config);
-            })
-            .AddQuartzHostedService(opt =>
-            {
-                opt.WaitForJobsToComplete = true;
-            });
-
-    private static void AddJobs(
-        this IServiceCollectionQuartzConfigurator q,
-        IConfiguration configuration,
-        TriggersConfig triggersConfig
-    )
-    {
-        ContentBlockerConfig? contentBlockerConfig = configuration
-            .GetRequiredSection(ContentBlockerConfig.SectionName)
-            .Get<ContentBlockerConfig>();
-        
-        q.AddJob<ContentBlocker>(contentBlockerConfig, triggersConfig.ContentBlocker);
-        
-        QueueCleanerConfig? queueCleanerConfig = configuration
-            .GetRequiredSection(QueueCleanerConfig.SectionName)
-            .Get<QueueCleanerConfig>();
-
-        if (contentBlockerConfig?.Enabled is true && queueCleanerConfig is { Enabled: true, RunSequentially: true })
-        {
-            q.AddJob<QueueCleaner>(queueCleanerConfig, string.Empty);
-            q.AddJobListener(new JobChainingListener(nameof(ContentBlocker), nameof(QueueCleaner)));
-        }
-        else
-        {
-            q.AddJob<QueueCleaner>(queueCleanerConfig, triggersConfig.QueueCleaner);
-        }
-        
-        DownloadCleanerConfig? downloadCleanerConfig = configuration
-            .GetRequiredSection(DownloadCleanerConfig.SectionName)
-            .Get<DownloadCleanerConfig>();
-
-        q.AddJob<DownloadCleaner>(downloadCleanerConfig, triggersConfig.DownloadCleaner);
-    }
-    
-    private static void AddJob<T>(
-        this IServiceCollectionQuartzConfigurator q,
-        IJobConfig? config,
-        string trigger
-    ) where T: GenericHandler
-    {
-        string typeName = typeof(T).Name;
-        
-        if (config is null)
-        {
-            throw new NullReferenceException($"{typeName} configuration is null");
-        }
-
-        if (!config.Enabled)
-        {
-            return;
-        }
-
-        bool hasTrigger = trigger.Length > 0;
-
-        q.AddJob<GenericJob<T>>(opts =>
-        {
-            opts.WithIdentity(typeName);
-
-            if (!hasTrigger)
-            {
-                // jobs with no triggers need to be stored durably
-                opts.StoreDurably();
-            }
-        });
-
-        // skip empty triggers
-        if (!hasTrigger)
-        {
-            return;
-        }
-        
-        IOperableTrigger triggerObj = (IOperableTrigger)TriggerBuilder.Create()
-            .WithIdentity("ExampleTrigger")
-            .StartNow()
-            .WithCronSchedule(trigger)
-            .Build();
-
-        IReadOnlyList<DateTimeOffset> nextFireTimes = TriggerUtils.ComputeFireTimes(triggerObj, null, 2);
-        TimeSpan triggerValue = nextFireTimes[1] - nextFireTimes[0];
-        
-        if (triggerValue > Constants.TriggerMaxLimit)
-        {
-            throw new Exception($"{trigger} should have a fire time of maximum {Constants.TriggerMaxLimit.TotalHours} hours");
-        }
-
-        if (triggerValue > StaticConfiguration.TriggerValue)
-        {
-            StaticConfiguration.TriggerValue = triggerValue;
-        }
-        
-        q.AddTrigger(opts =>
-        {
-            opts.ForJob(typeName)
-                .WithIdentity($"{typeName}-trigger")
-                .WithCronSchedule(trigger, x =>x.WithMisfireHandlingInstructionDoNothing())
-                .StartNow();
-        });
-        
-        // Startup trigger
-        q.AddTrigger(opts =>
-        {
-            opts.ForJob(typeName)
-                .WithIdentity($"{typeName}-startup-trigger")
-                .StartNow();
-        });
-    }
-}

code/Executable/DependencyInjection/ServicesDI.cs

@@ -1,47 +0,0 @@
-using Common.Configuration.ContentBlocker;
-using Common.Configuration.DownloadCleaner;
-using Common.Configuration.QueueCleaner;
-using Infrastructure.Interceptors;
-using Infrastructure.Providers;
-using Infrastructure.Services;
-using Infrastructure.Verticals.Arr;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.DownloadCleaner;
-using Infrastructure.Verticals.DownloadClient;
-using Infrastructure.Verticals.DownloadClient.Deluge;
-using Infrastructure.Verticals.DownloadClient.QBittorrent;
-using Infrastructure.Verticals.DownloadClient.Transmission;
-using Infrastructure.Verticals.Files;
-using Infrastructure.Verticals.ItemStriker;
-using Infrastructure.Verticals.QueueCleaner;
-
-namespace Executable.DependencyInjection;
-
-public static class ServicesDI
-{
-    public static IServiceCollection AddServices(this IServiceCollection services) =>
-        services
-            .AddTransient<IDryRunInterceptor, DryRunInterceptor>()
-            .AddTransient<CertificateValidationService>()
-            .AddTransient<SonarrClient>()
-            .AddTransient<RadarrClient>()
-            .AddTransient<LidarrClient>()
-            .AddTransient<QueueCleaner>()
-            .AddTransient<ContentBlocker>()
-            .AddTransient<DownloadCleaner>()
-            .AddTransient<IFilenameEvaluator, FilenameEvaluator>()
-            .AddTransient<IHardLinkFileService, HardLinkFileService>()
-            .AddTransient<UnixHardLinkFileService>()
-            .AddTransient<WindowsHardLinkFileService>()
-            .AddTransient<DummyDownloadService>()
-            .AddTransient<QBitService>()
-            .AddTransient<DelugeService>()
-            .AddTransient<TransmissionService>()
-            .AddTransient<ArrQueueIterator>()
-            .AddTransient<DownloadServiceFactory>()
-            .AddTransient<IStriker, Striker>()
-            .AddSingleton<BlocklistProvider>()
-            .AddSingleton<IgnoredDownloadsProvider<QueueCleanerConfig>>()
-            .AddSingleton<IgnoredDownloadsProvider<ContentBlockerConfig>>()
-            .AddSingleton<IgnoredDownloadsProvider<DownloadCleanerConfig>>();
-}

code/Executable/Executable.csproj

@@ -1,31 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Worker">
-
-    <PropertyGroup>
-        <AssemblyName>cleanuperr</AssemblyName>
-        <TargetFramework>net9.0</TargetFramework>
-        <Version Condition="'$(Version)' == ''">0.0.1</Version>
-        <Nullable>enable</Nullable>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <UserSecretsId>dotnet-Executable-6108b2ba-f035-47bc-addf-aaf5e20da4b8</UserSecretsId>
-    </PropertyGroup>
-
-    <ItemGroup>
-        <PackageReference Include="Microsoft.Extensions.Hosting" Version="9.0.2" />
-        <PackageReference Include="Microsoft.Extensions.Http" Version="9.0.2" />
-        <PackageReference Include="Microsoft.Extensions.Http.Polly" Version="9.0.2" />
-        <PackageReference Include="Quartz" Version="3.13.1" />
-        <PackageReference Include="Quartz.Extensions.DependencyInjection" Version="3.13.1" />
-        <PackageReference Include="Quartz.Extensions.Hosting" Version="3.13.1" />
-        <PackageReference Include="Serilog" Version="4.2.0" />
-        <PackageReference Include="Serilog.Expressions" Version="5.0.0" />
-        <PackageReference Include="Serilog.Extensions.Hosting" Version="9.0.0" />
-        <PackageReference Include="Serilog.Settings.Configuration" Version="9.0.0" />
-        <PackageReference Include="Serilog.Sinks.Console" Version="6.0.0" />
-        <PackageReference Include="Serilog.Sinks.File" Version="6.0.0" />
-    </ItemGroup>
-
-    <ItemGroup>
-      <ProjectReference Include="..\Common\Common.csproj" />
-      <ProjectReference Include="..\Infrastructure\Infrastructure.csproj" />
-    </ItemGroup>
-</Project>

code/Executable/HostExtensions.cs

@@ -1,23 +0,0 @@
-using System.Reflection;
-
-namespace Executable;
-
-public static class HostExtensions
-{
-    public static IHost Init(this IHost host)
-    {
-        ILogger<Program> logger = host.Services.GetRequiredService<ILogger<Program>>();
-
-        Version? version = Assembly.GetExecutingAssembly().GetName().Version;
-
-        logger.LogInformation(
-            version is null
-                ? "cleanuperr version not detected"
-                : $"cleanuperr v{version.Major}.{version.Minor}.{version.Build}"
-        );
-        
-        logger.LogInformation("timezone: {tz}", TimeZoneInfo.Local.DisplayName);
-        
-        return host;
-    }
-}

code/Executable/Jobs/GenericJob.cs

@@ -1,33 +0,0 @@
-using Infrastructure.Verticals.Jobs;
-using Quartz;
-using Serilog.Context;
-
-namespace Executable.Jobs;
-
-[DisallowConcurrentExecution]
-public sealed class GenericJob<T> : IJob
-    where T : IHandler
-{
-    private readonly ILogger<GenericJob<T>> _logger;
-    private readonly T _handler;
-
-    public GenericJob(ILogger<GenericJob<T>> logger, T handler)
-    {
-        _logger = logger;
-        _handler = handler;
-    }
-    
-    public async Task Execute(IJobExecutionContext context)
-    {
-        using var _ = LogContext.PushProperty("JobName", typeof(T).Name);
-        
-        try
-        {
-            await _handler.ExecuteAsync();
-        }
-        catch (Exception ex)
-        {
-            _logger.LogError(ex, "{name} failed", typeof(T).Name);
-        }
-    }
-}

code/Executable/Program.cs

@@ -1,12 +0,0 @@
-using Executable;
-using Executable.DependencyInjection;
-
-var builder = Host.CreateApplicationBuilder(args);
-
-builder.Services.AddInfrastructure(builder.Configuration);
-builder.Logging.AddLogging(builder.Configuration);
-
-var host = builder.Build();
-host.Init();
-
-host.Run();

code/Executable/appsettings.Development.json

@@ -1,149 +0,0 @@
-{
-  "DRY_RUN": true,
-  "HTTP_MAX_RETRIES": 0,
-  "HTTP_TIMEOUT": 100,
-  "HTTP_VALIDATE_CERT": "enabled",
-  "Logging": {
-    "LogLevel": "Verbose",
-    "Enhanced": true,
-    "File": {
-      "Enabled": false,
-      "Path": ""
-    }
-  },
-  "Triggers": {
-    "QueueCleaner": "0/10 * * * * ?",
-    "ContentBlocker": "0/10 * * * * ?",
-    "DownloadCleaner": "0/10 * * * * ?"
-  },
-  "ContentBlocker": {
-    "Enabled": true,
-    "IGNORE_PRIVATE": true,
-    "DELETE_PRIVATE": false,
-    "IGNORED_DOWNLOADS_PATH": "../test/data/cleanuperr/ignored_downloads"
-  },
-  "QueueCleaner": {
-    "Enabled": true,
-    "RunSequentially": true,
-    "IGNORED_DOWNLOADS_PATH": "../test/data/cleanuperr/ignored_downloads",
-    "IMPORT_FAILED_MAX_STRIKES": 3,
-    "IMPORT_FAILED_IGNORE_PRIVATE": true,
-    "IMPORT_FAILED_DELETE_PRIVATE": false,
-    "IMPORT_FAILED_IGNORE_PATTERNS": [
-      "file is a sample"
-    ],
-    "STALLED_MAX_STRIKES": 3,
-    "STALLED_RESET_STRIKES_ON_PROGRESS": true,
-    "STALLED_IGNORE_PRIVATE": true,
-    "STALLED_DELETE_PRIVATE": false,
-    "DOWNLOADING_METADATA_MAX_STRIKES": 3,
-    "SLOW_MAX_STRIKES": 5,
-    "SLOW_RESET_STRIKES_ON_PROGRESS": true,
-    "SLOW_IGNORE_PRIVATE": false,
-    "SLOW_DELETE_PRIVATE": false,
-    "SLOW_MIN_SPEED": "1MB",
-    "SLOW_MAX_TIME": 20,
-    "SLOW_IGNORE_ABOVE_SIZE": "4GB"
-  },
-  "DownloadCleaner": {
-    "Enabled": false,
-    "DELETE_PRIVATE": false,
-    "CATEGORIES": [
-      {
-        "Name": "tv-sonarr",
-        "MAX_RATIO": -1,
-        "MIN_SEED_TIME": 0,
-        "MAX_SEED_TIME": 240
-      }
-    ],
-    "UNLINKED_TARGET_CATEGORY": "cleanuperr-unlinked",
-    "UNLINKED_USE_TAG": false,
-    "UNLINKED_IGNORED_ROOT_DIR": "",
-    "UNLINKED_CATEGORIES": [
-      "tv-sonarr",
-      "radarr"
-    ],
-    "IGNORED_DOWNLOADS_PATH": "../test/data/cleanuperr/ignored_downloads"
-  },
-  "DOWNLOAD_CLIENT": "qbittorrent",
-  "qBittorrent": {
-    "Url": "http://localhost:8080",
-    "URL_BASE": "",
-    "Username": "test",
-    "Password": "testing"
-  },
-  "Deluge": {
-    "Url": "http://localhost:8112",
-    "URL_BASE": "",
-    "Password": "testing"
-  },
-  "Transmission": {
-    "Url": "http://localhost:9091",
-    "URL_BASE": "transmission",
-    "Username": "test",
-    "Password": "testing"
-  },
-  "Sonarr": {
-    "Enabled": true,
-    "IMPORT_FAILED_MAX_STRIKES": -1,
-    "SearchType": "Episode",
-    "Block": {
-      "Type": "blacklist",
-      "Path": "https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist"
-    },
-    "Instances": [
-      {
-        "Url": "http://localhost:8989",
-        "ApiKey": "425d1e713f0c405cbbf359ac0502c1f4"
-      }
-    ]
-  },
-  "Radarr": {
-    "Enabled": true,
-    "IMPORT_FAILED_MAX_STRIKES": -1,
-    "Block": {
-      "Type": "blacklist",
-      "Path": "https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist"
-    },
-    "Instances": [
-      {
-        "Url": "http://localhost:7878",
-        "ApiKey": "8b7454f668e54c5b8f44f56f93969761"
-      }
-    ]
-  },
-  "Lidarr": {
-    "Enabled": true,
-    "IMPORT_FAILED_MAX_STRIKES": -1,
-    "Block": {
-      "Type": "blacklist",
-      "Path": "https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist"
-    },
-    "Instances": [
-      {
-        "Url": "http://localhost:8686",
-        "ApiKey": "7f677cfdc074414397af53dd633860c5"
-      }
-    ]
-  },
-  "Notifiarr": {
-    "ON_IMPORT_FAILED_STRIKE": true,
-    "ON_STALLED_STRIKE": true,
-    "ON_SLOW_STRIKE": true,
-    "ON_QUEUE_ITEM_DELETED": true,
-    "ON_DOWNLOAD_CLEANED": true,
-    "ON_CATEGORY_CHANGED": true,
-    "API_KEY": "",
-    "CHANNEL_ID": ""
-  },
-  "Apprise": {
-    "ON_IMPORT_FAILED_STRIKE": true,
-    "ON_STALLED_STRIKE": true,
-    "ON_SLOW_STRIKE": true,
-    "ON_QUEUE_ITEM_DELETED": true,
-    "ON_DOWNLOAD_CLEANED": true,
-    "ON_CATEGORY_CHANGED": true,
-    "URL": "http://localhost:8000",
-    "KEY": ""
-  }
-}

code/Executable/appsettings.json

@@ -1,136 +0,0 @@
-{
-  "DRY_RUN": false,
-  "HTTP_MAX_RETRIES": 0,
-  "HTTP_TIMEOUT": 100,
-  "HTTP_VALIDATE_CERT": "enabled",
-  "Logging": {
-    "LogLevel": "Information",
-    "Enhanced": true,
-    "File": {
-      "Enabled": false,
-      "Path": ""
-    }
-  },
-  "Triggers": {
-    "QueueCleaner": "0 0/5 * * * ?",
-    "ContentBlocker": "0 0/5 * * * ?",
-    "DownloadCleaner": "0 0 * * * ?"
-  },
-  "ContentBlocker": {
-    "Enabled": false,
-    "IGNORE_PRIVATE": false,
-    "IGNORED_DOWNLOADS_PATH": ""
-  },
-  "QueueCleaner": {
-    "Enabled": false,
-    "RunSequentially": true,
-    "IGNORED_DOWNLOADS_PATH": "",
-    "IMPORT_FAILED_MAX_STRIKES": 0,
-    "IMPORT_FAILED_IGNORE_PRIVATE": false,
-    "IMPORT_FAILED_DELETE_PRIVATE": false,
-    "IMPORT_FAILED_IGNORE_PATTERNS": [],
-    "STALLED_MAX_STRIKES": 0,
-    "STALLED_RESET_STRIKES_ON_PROGRESS": false,
-    "STALLED_IGNORE_PRIVATE": false,
-    "STALLED_DELETE_PRIVATE": false,
-    "DOWNLOADING_METADATA_MAX_STRIKES": 0,
-    "SLOW_MAX_STRIKES": 0,
-    "SLOW_RESET_STRIKES_ON_PROGRESS": true,
-    "SLOW_IGNORE_PRIVATE": false,
-    "SLOW_DELETE_PRIVATE": false,
-    "SLOW_MIN_SPEED": "",
-    "SLOW_MAX_TIME": 0,
-    "SLOW_IGNORE_ABOVE_SIZE": ""
-  },
-  "DownloadCleaner": {
-    "Enabled": false,
-    "DELETE_PRIVATE": false,
-    "CATEGORIES": [],
-    "UNLINKED_TARGET_CATEGORY": "cleanuperr-unlinked",
-    "UNLINKED_USE_TAG": false,
-    "UNLINKED_IGNORED_ROOT_DIR": "",
-    "UNLINKED_CATEGORIES": [],
-    "IGNORED_DOWNLOADS_PATH": ""
-  },
-  "DOWNLOAD_CLIENT": "none",
-  "qBittorrent": {
-    "Url": "http://localhost:8080",
-    "URL_BASE": "",
-    "Username": "",
-    "Password": ""
-  },
-  "Deluge": {
-    "Url": "http://localhost:8112",
-    "URL_BASE": "",
-    "Password": "testing"
-  },
-  "Transmission": {
-    "Url": "http://localhost:9091",
-    "URL_BASE": "transmission",
-    "Username": "test",
-    "Password": "testing"
-  },
-  "Sonarr": {
-    "Enabled": false,
-    "IMPORT_FAILED_MAX_STRIKES": -1,
-    "SearchType": "Episode",
-    "Block": {
-      "Type": "blacklist",
-      "Path": ""
-    },
-    "Instances": [
-      {
-        "Url": "http://localhost:8989",
-        "ApiKey": ""
-      }
-    ]
-  },
-  "Radarr": {
-    "Enabled": false,
-    "IMPORT_FAILED_MAX_STRIKES": -1,
-    "Block": {
-      "Type": "blacklist",
-      "Path": ""
-    },
-    "Instances": [
-      {
-        "Url": "http://localhost:7878",
-        "ApiKey": ""
-      }
-    ]
-  },
-  "Lidarr": {
-    "Enabled": false,
-    "IMPORT_FAILED_MAX_STRIKES": -1,
-    "Block": {
-      "Type": "blacklist",
-      "Path": ""
-    },
-    "Instances": [
-      {
-        "Url": "http://localhost:8686",
-        "ApiKey": ""
-      }
-    ]
-  },
-  "Notifiarr": {
-    "ON_IMPORT_FAILED_STRIKE": false,
-    "ON_STALLED_STRIKE": false,
-    "ON_SLOW_STRIKE": false,
-    "ON_QUEUE_ITEM_DELETED": false,
-    "ON_DOWNLOAD_CLEANED": false,
-    "ON_CATEGORY_CHANGED": false,
-    "API_KEY": "",
-    "CHANNEL_ID": ""
-  },
-  "Apprise": {
-    "ON_IMPORT_FAILED_STRIKE": false,
-    "ON_STALLED_STRIKE": false,
-    "ON_SLOW_STRIKE": false,
-    "ON_QUEUE_ITEM_DELETED": false,
-    "ON_DOWNLOAD_CLEANED": false,
-    "ON_CATEGORY_CHANGED": false,
-    "URL": "",
-    "KEY": ""
-  }
-}