diff --git a/.env.example b/.env.example
index d22fe3e..712da41 100644
--- a/.env.example
+++ b/.env.example
@@ -50,7 +50,14 @@ ACOUSTID_API_KEY=
 # Your contact email, sent to MusicBrainz/AcoustID as part of the User-Agent
 # (required by their usage policy — apps without one get throttled).
 MUSICBRAINZ_OWNER_EMAIL=
-# YOUTUBE_COOKIES_PATH=/data/cookies.txt
+# YouTube Music source (search + download via yt-dlp). Enabled by default;
+# set to false to hide it from /sources.
+# YOUTUBE_ENABLED=true
+# Optional yt-dlp cookies for age/region-restricted downloads. The host folder
+# ./data/youtube is mounted at /data/youtube in api+worker; drop your exported
+# cookies.txt there. Search and most downloads work without it — it's only used
+# when the file is present, so leaving this set with no file is harmless.
+YOUTUBE_COOKIES_PATH=/data/youtube/cookies.txt
 
 # ---- Frontend (webui) ------------------------------------------------
 # Served same-origin behind nginx, so the default '/api/v1' just works.
diff --git a/docker-compose.yml b/docker-compose.yml
index a6afc02..5e80dfc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -58,6 +58,7 @@ services:
       - /app/.venv # keep the image's venv, don't shadow it
       - ./data/media:/data/media
       - ./data/transcode-cache:/data/transcode-cache
+      - ./data/youtube:/data/youtube # yt-dlp cookies.txt (optional; see .env)
     ports:
       - "${API_PORT:-8000}:8000" # direct access for debugging / docs
     depends_on:
@@ -79,6 +80,7 @@ services:
       - /app/.venv
       - ./data/media:/data/media
       - ./data/transcode-cache:/data/transcode-cache
+      - ./data/youtube:/data/youtube # yt-dlp cookies.txt (optional; see .env)
     depends_on:
       db: { condition: service_healthy }
       redis: { condition: service_healthy }
diff --git a/mcma-backend b/mcma-backend
index fa23568..7800746 160000
--- a/mcma-backend
+++ b/mcma-backend
@@ -1 +1 @@
-Subproject commit fa23568214c13a5963e62007b77b28aa50a4c46d
+Subproject commit 78007461e1e403358dceef700a61eeae1d142435
diff --git a/mcma-webui b/mcma-webui
index cdcacc5..231887c 160000
--- a/mcma-webui
+++ b/mcma-webui
@@ -1 +1 @@
-Subproject commit cdcacc56d13aab8510e4bf7e07cb941fa76e9a2c
+Subproject commit 231887c3b75961282279cda183acde42cb8c0e18