sabconect++ or nzbunity or any third party addon for adding nzb files to external sabznd server....

[loopdemack]

How to use sabconect++ or nzbunity or any third party addon for adding nzb files to external sabznd server, but using NZB api key. Seems they are asking for a full Api key, and my sabznd is external on a server in a full web interface.
If I set api key in third party I'm giving access to third party for everything.
Why can they accept nzb key?
When I set NZB key I'm getting "API Key incorrect, Use the api key from Config->General in your 3rd party program:"

Is there some addon that will work with the nzb key?

[jcfp]

The nzbkey literally only lets them send nzb files to sab, nothing more. So if these addons provide any other function, including monitoring the queue, history, tracking job completion and so on, they legitimately need the full apikey for that.

I don't expect any addon to limit themselves to just adding nzbs, as pretty much any user would want the option to monitor downloads, modify queue order and so on. The nzb key is mostly used for allowing an indexer to add jobs to a sabnzbd instance that otherwise stays out of reach for them.

[loopdemack]

Yes I just want the option to add nzb to sabnzbd nothing more, because indexer doesn't support sabnzbd. It supports nzbhydra for using nzb api keys. I heard there was a temper-monkey script which you fill-out with details of sabnzbd and with your categories, but it was a private one, I can't find it.


Also how can you be sure that your data is safe with a third-party extension, that it won't call home or if the owner of the extension would not sell the extension to the malware company as we had it with thousands extensions in previous years .

[jcfp]

I'm not aware of any addon or script that limits itself to just that one function. And you can never be sure your data is safe, unless the extension is entirely open source and you actually audit its code prior to install (and every future update).

Most indexers do have a curated rss feed ("cart") feature that allows sabnzbd to pull in nzbs without the need for nzb or api keys or even exposing the program to incoming connections from the internet at all. There is a slight delay associated with a setup like that, since sab only connects to the indexer at scheduled intervals to read the rss feed, but it is a safe and easy.

[sander]

Yes I just want the option to add nzb to sabnzbd nothing more

https://sabnzbd.org/wiki/configuration/ ... y%20allows says "There is also a separate NZB key, which only allows for adding, modifying and removing jobs in the queue. When this key is used for something else, the request will return error: API Key Incorrect."

So if you fill out the NZB key instead of the API key in the app/index, the app or indexer can only add the NZB. It can not inspect the queue or use others commands

Proof:

With the API key, you can inspect the queue:

Code: Select all

$ curl -s  'http://127.0.0.1:8080/api?output=json&apikey=3aa5b2faa7874d75a7fd3059f351d595&mode=queue' | jq | grep nzo_id
        "nzo_id": "SABnzbd_nzo_iyls3xg0",
        "nzo_id": "SABnzbd_nzo_ts6a4tkx",
        "nzo_id": "SABnzbd_nzo_7wl7i2wd",

With the NZB key, requesting the queue, leads to an error, so safer:

Code: Select all

$ curl -s  'http://127.0.0.1:8080/api?output=json&apikey=d658b95e4b1f4805865221b3ad156270&mode=queue' 
API Key Incorrect

Having said that: like jcfp says, if you use the indexer's cart RSS feed in SABnzbd, you will not share API nor NZB key with the indexer. Also avoids difficult stuff with port forwarding and firewalls, because ... not needed!