diff --git a/.env.example b/.env.example
index 6518437..e53d7e1 100644
--- a/.env.example
+++ b/.env.example
@@ -36,6 +36,11 @@ TRANSMISSION_RPC_PASSWORD=
 # Host port to expose Grafana on. Defaults to 3000 if unset.
 GRAFANA_PORT=3000
 
+# ============ Checkrr ============
+# checkrr has no multi-arch image; every tag is architecture-suffixed.
+# Defaults to latest-amd64. On arm64 hosts, set this to latest-arm64v8.
+CHECKRR_IMAGE_TAG=latest-amd64
+
 # ============ Decluttarr (queue cleanup for Radarr/Sonarr) ============
 # These keys come from Radarr's Settings -> General -> API Key (and Sonarr's
 # equivalent) AFTER the stack is running. Decluttarr starts fine with them
diff --git a/docker-compose.yml b/docker-compose.yml
index f77044d..27ab5e8 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -331,11 +331,11 @@ services:
 
   # Scans media files for codec / corruption issues. Web UI on :8585.
   # checkrr publishes no multi-arch tag — every tag is arch-suffixed, so there
-  # is no bare `latest`. amd64 hosts use `latest-amd64`; arm64 hosts must swap
-  # this to `latest-arm64v8`.
+  # is no bare `latest`. Defaults to amd64; arm64 hosts set
+  # CHECKRR_IMAGE_TAG=latest-arm64v8 in .env instead of editing this file.
   checkrr:
     container_name: checkrr
-    image: ghcr.io/aetaric/checkrr:latest-amd64
+    image: ghcr.io/aetaric/checkrr:${CHECKRR_IMAGE_TAG:-latest-amd64}
     networks:
       - media_network
     ports: