Watcharr

Watcharr listens on port **3000 inside the container**, not 3080. In Docker port mapping, the format is HOST:CONTAINER, so map host port 3080 to container port 3000:

services:
  watcharr:
    image: ghcr.io/sbondco/watcharr:latest
    container_name: watcharr
    ports:
      - "3080:3000"
    volumes:
      - ./data:/data
    restart: unless-stopped

Apply the change:

docker compose up -d

If Nginx runs on the host, proxy to the published host port:

location / {
    proxy_pass http://127.0.0.1:3080;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

If Nginx runs in a container, put both containers on the same Docker network and proxy directly to the container port:

proxy_pass http://watcharr:3000;

Verify the internal listener with:

docker logs watcharr

You should see Listening on http://0.0.0.0:3000. Using 3080:3080 causes the reverse proxy to time out because nothing is listening on port 3080 inside the Watcharr container.

This happens because the Trakt importer writes your entire watch history to the SQLite database in bulk, locking it so authentication queries fail (401 'not authorized' errors, forced logouts). Fix: update Watcharr to the latest version, which runs SQLite in WAL (Write-Ahead Logging) mode, allowing concurrent reads during imports. Workaround on older versions: the import continues in the background even if the progress popup appears stuck, so let it finish completely (large histories can take hours), then log back in once the database writes are done.