diff --git a/conf/config.xml b/conf/config.xml
index 1dc6255..a717392 100644
--- a/conf/config.xml
+++ b/conf/config.xml
@@ -6,7 +6,13 @@
__PATH__
127.0.0.1
__API_KEY__
- None
+ External
BuiltIn
main
+ False
+ False
+ Sonarr
+ DisabledForLocalAddresses
+
+
diff --git a/doc/POST_UPGRADE.d/4.0.1.929~ynh1.md b/doc/POST_UPGRADE.d/4.0.1.929~ynh1.md
new file mode 100644
index 0000000..6f244af
--- /dev/null
+++ b/doc/POST_UPGRADE.d/4.0.1.929~ynh1.md
@@ -0,0 +1,5 @@
+The app's `__DATA_DIR__/config.xml` will now be overidden upon every upgrade. This is to make sure the internal authentication system is disabled, since you can benefit from YunoHost's permission system.
+
+In most use cases it should be fine. If you do need to alter the file, refer to the hooks system.
+
+If you altered the file, a backup has been made in `__DATA_DIR__`.
diff --git a/scripts/upgrade b/scripts/upgrade
index 53fef36..c1b1b36 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -55,6 +55,17 @@ yunohost service add "$app" --description="Sonarr daemon" --log="/var/log/$app/s
# Use logrotate to manage app-specific logfile(s)
ynh_use_logrotate --non-append --logfile="/var/log/$app/"
+#=================================================
+# ADD A CONFIGURATION
+#=================================================
+ynh_script_progression --message="Configuring Radarr..." --weight=2
+
+ynh_add_config --template="config.xml" --destination="$data_dir/config.xml"
+
+chmod 750 "$data_dir"
+chmod -R o-rwx "$data_dir"
+chown -R "$app:$app" "$data_dir"
+
#=================================================
# START SYSTEMD SERVICE
#=================================================