diff --git a/nodes/heimdall/prowlarr/compose.yaml b/nodes/heimdall/prowlarr/compose.yaml
index dbd90bf..c826b1a 100644
--- a/nodes/heimdall/prowlarr/compose.yaml
+++ b/nodes/heimdall/prowlarr/compose.yaml
@@ -25,10 +25,19 @@ services:
     restart: unless-stopped
     networks:
       - proxy-net
+  prowlarr_outpost:
+    image: ghcr.io/goauthentik/proxy:2026.2.2
+    container_name: prowlarr_outpost
+    networks:
+      - proxy-net
+    environment:
+      AUTHENTIK_HOST: https://sso.castaldifamily.com
+      AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE
+      AUTHENTIK_INSECURE: "false"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.prowlarr.entrypoints=websecure"
-      - "traefik.http.routers.prowlarr.rule=Host(`prowlarr.castaldifamily.com`)"
-      - "traefik.http.routers.prowlarr.tls=true"
-      - "traefik.http.routers.prowlarr.tls.certresolver=cloudflare"
-      - "traefik.http.services.prowlarr.loadbalancer.server.port=9696"
+      - "traefik.http.routers.prowlarr-proxy.entrypoints=websecure"
+      - "traefik.http.routers.prowlarr-proxy.rule=Host(`prowlarr.castaldifamily.com`)"
+      - "traefik.http.routers.prowlarr-proxy.tls=true"
+      - "traefik.http.routers.prowlarr-proxy.tls.certresolver=cloudflare"
+      - "traefik.http.services.prowlarr-proxy.loadbalancer.server.port=9000"
\ No newline at end of file