diff --git a/nodes/heimdall/radarr/compose.yaml b/nodes/heimdall/radarr/compose.yaml
index b9bdd2c..13f67f8 100644
--- a/nodes/heimdall/radarr/compose.yaml
+++ b/nodes/heimdall/radarr/compose.yaml
@@ -27,10 +27,26 @@ services:
     restart: unless-stopped
     networks:
       - proxy-net
+    # labels:
+    #   - "traefik.enable=true"
+    #   - "traefik.http.routers.radarr.entrypoints=websecure"
+    #   - "traefik.http.routers.radarr.rule=Host(`radarr.castaldifamily.com`)"
+    #   - "traefik.http.routers.radarr.tls=true"
+    #   - "traefik.http.routers.radarr.tls.certresolver=cloudflare"
+    #   - "traefik.http.services.radarr.loadbalancer.server.port=7878"
+  radarr_outpost:
+    image: ghcr.io/goauthentik/proxy:2026.2.2
+    container_name: radarr_outpost
+    networks:
+      - proxy-net
+    environment:
+      AUTHENTIK_HOST: https://sso.castaldifamily.com
+      AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB
+      AUTHENTIK_INSECURE: "false"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.radarr.entrypoints=websecure"
-      - "traefik.http.routers.radarr.rule=Host(`radarr.castaldifamily.com`)"
-      - "traefik.http.routers.radarr.tls=true"
-      - "traefik.http.routers.radarr.tls.certresolver=cloudflare"
-      - "traefik.http.services.radarr.loadbalancer.server.port=7878" # Internal port
+      - "traefik.http.routers.radarr-proxy.entrypoints=websecure"
+      - "traefik.http.routers.radarr-proxy.rule=Host(`radarr.castaldifamily.com`)"
+      - "traefik.http.routers.radarr-proxy.tls=true"
+      - "traefik.http.routers.radarr-proxy.tls.certresolver=cloudflare"
+      - "traefik.http.services.radarr-proxy.loadbalancer.server.port=9000"
\ No newline at end of file