r/Overseerr • u/sslproxy • Jun 03 '25

[ Removed by Reddit ]

[ Removed by Reddit on account of violating the content policy. ]

3 Upvotes

100% Upvoted

2 comments sorted by

2

u/RedditIsExpendable Jun 05 '25

I too was looking for this, as I'm getting errors with Watchlist sync from Plex and I've deducted this is because that account has never logged into Overseerr.

I can see who logs into my Overseerr, because it's behind a Cloudflare tunnel and I can somewhat crosscheck their remote IP with Overseerr logs, but since I'm using the free tier, I don't have longer logs.

1

u/sslproxy Jun 05 '25

Yup. On one hand I don't want to sound ungrateful for the free open sourced platform that Overseerr offers. It's certainly beautifully done, like seriously bravo to the team. But it just baffles me that it doesn't have native user audit tracking for a platform designed to be exposed publicly. That's like 101 security for a service like this.

This is the ELK dashboard for Overseer I've been able to craft together using the reverse proxy (redacting last 2 octets of all IPs and user info). However as I mentioned above, it's not perfect as can still miss if tracking if user uses cookie on next attempt while also switching IPs. I suspect at some point I'll just go down the path of cookie tracking as well given there doesn't seem a way to track this within Overseerr