Bazarr Subtitle Manager for Sonarr and Radarr

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Why This AMI Instead of Self-Deploying?

Bazarr is a popular open source companion to Sonarr and Radarr that manages subtitles for the TV series and movies in your media library. It watches for the subtitle languages you want, works out which are missing or could be upgraded, searches your configured subtitle providers, downloads the best matches, and files them alongside the media automatically. Deploying it yourself means installing Python and its native build dependencies, creating a virtual environment, running it as a hardened service, enabling authentication, and putting a TLS reverse proxy in front so the web interface is never exposed in the clear. This AMI eliminates that effort entirely - a working, secured subtitle manager is running within minutes of launch, not hours, and is backed by 24/7 expert support.

The current release available is Bazarr 1.6.0.

## What This Image Ships

This image ships Bazarr on its own. You connect it to your own existing Sonarr and Radarr instances and your own media library - no media, Sonarr or Radarr is bundled. Bazarr is installed from the official release archive, which is verified against the checksum the project publishes before it is unpacked, runs inside a dedicated Python virtual environment, and is served by a dedicated unprivileged system user under systemd with automatic restarts, clean logging and a hardened service sandbox. The self-updater is turned off so the running system never silently drifts from the published image; upgrades arrive as a new cloudimg image version.

## Secure By Default

A stock Bazarr starts with authentication switched off, which means anyone who can reach it gets full control of the application and its API key. This image eliminates that risk:

• Bazarr binds to the loopback address only and is fronted by an nginx TLS reverse proxy, so the application is never directly reachable from the network and all traffic to the web UI and API is encrypted
• The recommended security group opens only SSH (22) and the HTTPS front door (443); scope both to your own administrator network
• Authentication is enforced, and a unique administrator password and a unique API key are generated on every instance's first boot
• The password is stored only as a one way digest, and the plain values are placed in a root only file for the administrator to read
• A unique self-signed TLS certificate is generated per instance on first boot; replace it with your own certificate or terminate TLS at a load balancer
• No usable credential is baked into the image, so no two deployments share a login, and the service will not start until the secured configuration is in place

## Ready To Use

Browse to the instance over HTTPS on port 443, sign in with the generated administrator credentials, then point Bazarr at your existing Sonarr and Radarr, choose your wanted subtitle languages and providers, and let it fill in and upgrade subtitles across your library. An unauthenticated health endpoint is provided for load balancer probes, so monitoring needs no credential even though the interface and API do.

## What You Avoid By Using This AMI

• Installing Python, native build dependencies and a virtual environment
• Running Bazarr as a hardened, unprivileged systemd service
• Enabling and testing authentication so the UI is never world open
• Standing up a TLS reverse proxy in front of the application
• Ongoing maintenance and security patching without expert guidance

## cloudimg Support

24/7 technical support by email and chat with a one-hour average response for critical issues. Our engineers help with deployment, connecting Bazarr to Sonarr and Radarr, TLS termination, provider configuration, backups and scaling.

## Use Cases

• Automated subtitle management for a self-hosted Sonarr and Radarr media library
• A private, in-your-own-VPC subtitle service with full data ownership and enforced authentication
• Centralised, multi-language subtitle fetching and upgrading across an existing TV and movie collection

Bazarr is a trademark of its respective owner. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.