diff --git a/nodes/heimdall/prowlarr/compose.yaml b/nodes/heimdall/prowlarr/compose.yaml
index e8f9a12..d8b9fcb 100644
--- a/nodes/heimdall/prowlarr/compose.yaml
+++ b/nodes/heimdall/prowlarr/compose.yaml
@@ -32,6 +32,7 @@ services:
       - proxy-net
     environment:
       AUTHENTIK_HOST: http://authentik_server:9000
+      AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
       AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE
       AUTHENTIK_INSECURE: "false"
     labels:
diff --git a/nodes/heimdall/radarr/compose.yaml b/nodes/heimdall/radarr/compose.yaml
index 64d506c..5de6e3b 100644
--- a/nodes/heimdall/radarr/compose.yaml
+++ b/nodes/heimdall/radarr/compose.yaml
@@ -41,6 +41,7 @@ services:
       - proxy-net
     environment:
       AUTHENTIK_HOST: http://authentik_server:9000
+      AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
       AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB
       AUTHENTIK_INSECURE: "false"
     labels:
diff --git a/nodes/heimdall/sabnzbd/compose.yaml b/nodes/heimdall/sabnzbd/compose.yaml
index 33f68ca..3889941 100644
--- a/nodes/heimdall/sabnzbd/compose.yaml
+++ b/nodes/heimdall/sabnzbd/compose.yaml
@@ -41,6 +41,7 @@ services:
       - proxy-net
     environment:
       AUTHENTIK_HOST: http://authentik_server:9000
+      AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
       AUTHENTIK_TOKEN: xvPTq2ASWspkW9Z7H44RPwLZ9LhFqBrtQ11eXPlE7QWGhsixWU7Rc07xVmsw
       AUTHENTIK_INSECURE: "false"
     labels:
diff --git a/nodes/heimdall/sonarr/compose.yaml b/nodes/heimdall/sonarr/compose.yaml
index 6f70c34..b51960c 100644
--- a/nodes/heimdall/sonarr/compose.yaml
+++ b/nodes/heimdall/sonarr/compose.yaml
@@ -43,10 +43,9 @@ services:
     container_name: sonarr_outpost
     environment:
         AUTHENTIK_HOST: http://authentik_server:9000
+        AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
         AUTHENTIK_INSECURE: "false"
         AUTHENTIK_TOKEN: cJ4UWeFQ2DUTyvR22s588ciFuLSw698HTVxnEf7ecN3dq3nFOyVod6ngE66Z
-        # Optional setting to be used when `authentik_host` for internal communication doesn't match the public URL.
-        # AUTHENTIK_HOST_BROWSER: https://sonarr.castaldifamily.com
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.sonarr.entrypoints=websecure"