Upgrade config file to disable internal auth mechanism

conf/config.xml

@@ -1,5 +1,5 @@
 <Config>
-  <LogLevel>info</LogLevel>
+  <LogLevel>warn</LogLevel>
   <EnableSsl>False</EnableSsl>
   <Port>__PORT__</Port>
   <SslPort>__PORT__</SslPort>
@@ -9,4 +9,10 @@
   <AuthenticationMethod>None</AuthenticationMethod>
   <UpdateMechanism>BuiltIn</UpdateMechanism>
   <Branch>main</Branch>
+  <LaunchBrowser>False</LaunchBrowser>
+  <AnalyticsEnabled>False</AnalyticsEnabled>
+  <InstanceName>Sonarr</InstanceName>
+  <AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>
+  <SslCertPath></SslCertPath>
+  <SslCertPassword></SslCertPassword>
 </Config>

doc/POST_UPGRADE.d/3.0.10.1567~ynh2.md

@@ -0,0 +1,5 @@
+The app's `__DATA_DIR__/config.xml` will now be overidden upon every upgrade. This is to make sure the internal authentication system is disabled, since you can benefit from YunoHost's permission system.
+
+In most use cases it should be fine. If you do need to alter the file, refer to the hooks system.
+
+If you altered the file, a backup has been made in `__DATA_DIR__`.

scripts/upgrade

@@ -55,6 +55,17 @@ yunohost service add "$app" --description="Sonarr daemon" --log="/var/log/$app/s
 # Use logrotate to manage app-specific logfile(s)
 ynh_use_logrotate --non-append --logfile="/var/log/$app/"
 
+#=================================================
+# ADD A CONFIGURATION
+#=================================================
+ynh_script_progression --message="Configuring Radarr..." --weight=2
+
+ynh_add_config --template="config.xml" --destination="$data_dir/config.xml"
+
+chmod 750 "$data_dir"
+chmod -R o-rwx "$data_dir"
+chown -R "$app:$app" "$data_dir"
+
 #=================================================
 # START SYSTEMD SERVICE
 #=================================================