diff --git a/server/config/autopirate/docker-compose.yml b/server/config/autopirate/docker-compose.yml
index 77fba97..74d51e7 100644
--- a/server/config/autopirate/docker-compose.yml
+++ b/server/config/autopirate/docker-compose.yml
@@ -25,13 +25,8 @@ services:
       - traefik.http.routers.radarr.rule=Host(`radarr.jafner.net`)
       - traefik.http.routers.radarr.tls.certresolver=lets-encrypt
       - traefik.http.services.radarr.loadbalancer.server.port=7878
-      - traefik.http.routers.radarr.middlewares=lan-only@file
-      # - traefik.http.routers.radarr.priority=10
-      # - traefik.http.routers.radarr-auth.rule=Host(`radarr.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.radarr-auth.priority=15
-      # - traefik.http.routers.radarr-auth.service=authentik-auth@file
-      
-  
+      - traefik.http.routers.radarr.middlewares=lan-only@file,traefik-forward-auth@file
+
   sonarr:
     image: linuxserver/sonarr
     container_name: autopirate_sonarr
@@ -57,11 +52,7 @@ services:
       - traefik.http.routers.sonarr.rule=Host(`sonarr.jafner.net`)
       - traefik.http.routers.sonarr.tls.certresolver=lets-encrypt
       - traefik.http.services.sonarr.loadbalancer.server.port=8989
-      - traefik.http.routers.sonarr.middlewares=lan-only@file
-      # - traefik.http.routers.sonarr.priority=10
-      # - traefik.http.routers.sonarr-auth.rule=Host(`sonarr.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.sonarr-auth.priority=15
-      # - traefik.http.routers.sonarr-auth.service=http://authentik-server:9000/outpost.goauthentik.io
+      - traefik.http.routers.sonarr.middlewares=lan-only@file,traefik-forward-auth@file
 
   lidarr:
     image: linuxserver/lidarr
@@ -88,11 +79,7 @@ services:
       - traefik.http.routers.lidarr.rule=Host(`lidarr.jafner.net`)
       - traefik.http.routers.lidarr.tls.certresolver=lets-encrypt
       - trarfik.http.services.lidarr.loadbalancer.server.port=8686
-      - traefik.http.routers.lidarr.middlewares=lan-only@file
-      # - traefik.http.routers.lidarr.priority=10
-      # - traefik.http.routers.lidarr-auth.rule=Host(`lidarr.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.lidarr-auth.priority=15
-      # - traefik.http.routers.lidarr-auth.service=http://authentik-server:9000/outpost.goauthentik.io
+      - traefik.http.routers.lidarr.middlewares=lan-only@file,traefik-forward-auth@file
 
   nzbhydra2:
     image: linuxserver/nzbhydra2
@@ -118,11 +105,7 @@ services:
       - traefik.http.routers.nzbhydra2.rule=Host(`nzbhydra.jafner.net`)
       - traefik.http.routers.nzbhydra2.tls.certresolver=lets-encrypt
       - traefik.http.services.nzbhydra2.loadbalancer.server.port=5076
-      - traefik.http.routers.nzbhydra2.middlewares=lan-only@file
-      # - traefik.http.routers.nzbhydra2.priority=10
-      # - traefik.http.routers.nzbhydra2-auth.rule=Host(`nzbhydra.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.nzbhydra2-auth.priority=15
-      # - traefik.http.routers.nzbhydra2-auth.service=http://authentik-server:9000/outpost.goauthentik.io
+      - traefik.http.routers.nzbhydra2.middlewares=lan-only@file,traefik-forward-auth@file
   
   sabnzbd:
     image: linuxserver/sabnzbd
@@ -152,11 +135,7 @@ services:
       - traefik.http.routers.sabnzbd.rule=Host(`sabnzbd.jafner.net`)
       - traefik.http.routers.sabnzbd.tls.certresolver=lets-encrypt
       - traefik.http.services.sabnzbd.loadbalancer.server.port=8080
-      - traefik.http.routers.sabnzbd.middlewares=lan-only@file
-      # - traefik.http.routers.sabnzbd.priority=10
-      # - traefik.http.routers.sabnzbd-auth.rule=Host(`sabnzbd.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.sabnzbd-auth.priority=15
-      # - traefik.http.routers.sabnzbd-auth.service=http://authentik-server:9000/outpost.goauthentik.io
+      - traefik.http.routers.sabnzbd.middlewares=lan-only@file,traefik-forward-auth@file
 
   tdarr:
     image: haveagitgat/tdarr:latest
@@ -180,12 +159,8 @@ services:
     labels:
       - traefik.http.routers.tdarr.rule=Host(`tdarr.jafner.net`)
       - traefik.http.routers.tdarr.tls.certresolver=lets-encrypt
-      - traefik.http.routers.tdarr.middlewares=lan-only@file
+      - traefik.http.routers.tdarr.middlewares=lan-only@file,traefik-forward-auth@file
       - traefik.http.services.tdarr.loadbalancer.server.port=8265
-      # - traefik.http.routers.tdarr.priority=10
-      # - traefik.http.routers.tdarr-auth.rule=Host(`tdarr.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.tdarr-auth.priority=15
-      # - traefik.http.routers.tdarr-auth.service=http://authentik-server:9000/outpost.goauthentik.io
     environment:
       - TZ=${TZ}
       - PUID=${PUID}
@@ -269,11 +244,7 @@ services:
       - traefik.http.routers.jackett.rule=Host(`jackett.jafner.net`)
       - traefik.http.routers.jackett.tls.certresolver=lets-encrypt
       - traefik.http.services.jackett.loadbalancer.server.port=9117
-      - traefik.http.routers.jackett.middlewares=lan-only@file
-      # - traefik.http.routers.jackett.priority=10
-      # - traefik.http.routers.jackett-auth.rule=Host(`jackett.jafner.net`) && PathPrefix(`/outpost.goauthentik.io/`)
-      # - traefik.http.routers.jackett-auth.priority=15
-      # - traefik.http.routers.jackett-auth.service=http://authentik-server:9000/outpost.goauthentik.io
+      - traefik.http.routers.jackett.middlewares=lan-only@file,traefik-forward-auth@file
 
 networks:
   tdarr: