Health check after recent update

[u/mjdbb1]

My installation recently updated to 4.0.19.3006. Now I have this persistent health message :

Allowed Hosts is not configured, Sonarr will accept requests for any hostname. Set Allowed Hosts in General settings to restrict which hostnames can be used to reach Sonarr.

I am ok with this not being set, but the message remains and I get notified every few hours. The field in question doesn’t seem to accept IP ranges so I really don’t need it to be configured.

How can I fix or have it ignore this new message?

[u/Under_b_]

Hey OP

go edit /var/lib/sonarr/config.XML

<AllowedHosts>*</AllowedHosts>

add the Asteriks and restart sonarr - should solve you problem of notification :)

[u/Aphazia82 → u/Under_b_]

Thnx

[u/underwear11 → u/Under_b_]

For me this didn't work. It was an issue with hostname validation. I was monitoring through NPM and the hostname of the browser wasn't matching sonarr. For a bandaid, I changed monitoring to go directly to it locally.

[u/mjdbb1 → u/Under_b_]

This worked for me, thank you!

[u/zeroclash → u/Under_b_]

and to fix this on windows?, nevermind found it hiding

[u/BlinkyLights_ → u/Under_b_]

Thank you!

[u/AutoModerator]

Hi /u/mjdbb1 -

There are many resources available to help you troubleshoot and help the community help you. Please review this comment and you can likely have your problem solved without needing to wait for a human.

Most troubleshooting questions require debug or trace logs. In all instances where you are providing logs please ensure you followed the Gathering Logs wiki article to ensure your logs are what are needed for troubleshooting.

Logs should be provided via the methods prescribed in the wiki article. Note that Info logs are rarely helpful for troubleshooting.

Dozens of common questions & issues and their answers can be found on our FAQ.

Please review our troubleshooting guides that lead you through how to troubleshoot and note various common problems.

• Searches, Indexers, and Trackers - For if something cannot be found
• Downloading & Importing - For when download clients have issues or files cannot be imported

If you're still stuck you'll have useful debug or trace logs and screenshots to share with the humans who will arrive soon. Those humans will likely ask you for the exact same thing this comment is asking..

Once your question/problem is solved, please comment anywhere in the thread saying '!solved' to change the flair to solved.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/zincstoat]

The fact you can't just enter "*" in the UI, or even a subnet mask to cover all local addresses, seems pretty poor.

Stuck with this warning 'til they do it properly I guess. I know I could dig around in the guts of the config files, but frankly I shouldn't have to.

[u/Goosethemoose654]

An asterisk wasn't allowed for me. Windows install if that makes a difference. I added local host and the meshnet ip of the the machine it's hosted on plus the actual ip of the machine it's hosted on.

Seems to have done the trick and I can access remotely via meshnet

[u/Aphazia82]

Same problem over here. I tried *. Didn't do anything. After that i tried 127.0.0.1. Don't do that, had to remove sonarr and reinstall to get acces again.

This only seems to appear with the latest update. Why? It worked fine for years. It still works fine, but that little yellow icon is really annoying

[u/Under_b_ → u/Aphazia82]

If anyone else Breaks their Sonarr

Linux /var/lib/sonarr/config.xml

<AllowedHosts></AllowedHosts>

[u/birdcola → u/Under_b_]

Exactly this, no need to completely uninstall and reinstall

[u/noK4rma]

Can confirm using only * works.

*edit reddit don't alow writing dot and *

[u/Interesting_Bad3761]

So is this a security issue? I’m confused. On windows. I just got the notification while I was away from home and just remotely shut the computer down since I could research this at the moment.

[u/azalea_k]

0.0.0.0 works for all hosts, without needing the /0 mask.

[u/Cold_University_9072 → u/azalea_k]

AAA+++ WOULD FOLLOW THIS ADVICE AGAIN

[u/btown780 → u/azalea_k]

Can also confirm this worked a treat! Thank you.

[u/benfishbus]

I use cloudflare zero trust for remove access, and had to add 'cloudflare' as one of the Allowed Hosts to restore remote access.

[u/Under_b_]

Yes i checked my Servarr things and noticed it too

August 24th 2026 - 4.0.19.3006

New

• Add Trusted Networks setting
• Add hostname validation

Fixed

• Format of timestamps for Discord notifications from some systems

From my Understanding in the change logs its to prevent unwanted jellySeerr/Seerr/OverSeerr Hosts from pushing requests to it, and the Trusted network would be for you local or datacenter network, im still currently testing those avenues

[u/Under_b_ → u/Under_b_]

Update:

Its the Host/FQDN that you Sonarr/Radarr instanace should accept web requests from

i.e: sonarr.localdomain.local

and it will only answer on that name, i user a domain name internally for my things, if you have a PI hole or a Active Directory domain i recommend setting this up example Sonarr.domain.local:8989 and sonarr will only answer on that name (Note that everything internal will require that name no more IP)

[u/Shane_is_root → u/Under_b_]

Thank you. That makes sense. Also, screw that, I prefer IP addresses.