Configuration

Overview of Comicarr settings, config file structure, and credential encryption.

All Comicarr settings are stored in config.ini inside your data directory. The web Settings page edits a subset of options; many advanced settings (download clients, Newznab/Torznab, OPDS, library paths) are still configured by editing config.ini directly and restarting when required.

Settings are accessed internally via comicarr.CONFIG.option_name.

Config File Location

DeploymentPath
Docker/config/comicarr/config.ini (entrypoint sets --datadir /config/comicarr)
Manual<datadir>/config.ini — defaults to the application directory unless you pass --datadir

UI vs config.ini

Configured in the web UITypically config.ini only
ComicVine / Metron / MangaDex / MAL keysDownload client hosts, ports, credentials
Comicarr API key (regenerate)Newznab / Torznab providers
NotificationsOPDS enablement and credentials
AI (BYOK)Many scheduler and advanced path options
Quality / size filters (Search tab)Library destination paths (shown read-only in UI)

Credential Encryption

Comicarr encrypts sensitive values (passwords, API keys) at rest using Fernet symmetric encryption.

How to identify encrypted values

Encrypted values in config.ini always start with the prefix gAAAAA. If you see a value beginning with this string, it is encrypted and will be decrypted transparently at runtime.

Master Key

A master encryption key is stored in your secure directory:

<data_dir>/.secure/master.key

On Docker, that is typically /config/comicarr/.secure/master.key.

The file is created automatically on first run with restrictive permissions. If you move your data directory to a new machine, you must copy .secure/ (or at least master.key) alongside config.ini or encrypted values will be unreadable.

Do not delete master.key

Losing this file means all encrypted credentials in config.ini must be re-entered through the UI or config file.

Configuration Sections

On this page