diff --git a/servarr-system/servarr.yaml b/servarr-system/servarr.yaml
index 6836a95..4e0019f 100644
--- a/servarr-system/servarr.yaml
+++ b/servarr-system/servarr.yaml
@@ -897,7 +897,7 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-body-size: "0"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/auth-url: "http://ak-outpost-arr-outpost.auth-system.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx"
-    nginx.ingress.kubernetes.io/auth-signin: "https://authentik.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri"
+    nginx.ingress.kubernetes.io/auth-signin: "https://sonarr.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri"
     nginx.ingress.kubernetes.io/auth-response-headers: "Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email"
     nginx.ingress.kubernetes.io/auth-snippet: |
       proxy_set_header X-Forwarded-Host $http_host;
@@ -974,3 +974,40 @@ spec:
     - radarr.dooplex.hu
     secretName: radarr-tls
 ---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sonarr-outpost
+  namespace: servarr-system
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  ingressClassName: nginx-internal
+  rules:
+  - host: sonarr.dooplex.hu
+    http:
+      paths:
+      - path: /outpost.goauthentik.io
+        pathType: Prefix
+        backend:
+          service:
+            name: ak-outpost-arr-outpost
+            port:
+              number: 9000
+  tls:
+  - hosts:
+    - sonarr.dooplex.hu
+    secretName: sonarr-tls
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: ak-outpost-arr-outpost
+  namespace: servarr-system
+spec:
+  type: ExternalName
+  externalName: ak-outpost-arr-outpost.auth-system.svc.cluster.local
+  ports:
+  - port: 9000
+---