diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index fb20ff2..ed0ac14 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -24,7 +24,6 @@ import unprotected grafana host:3333
 import unprotected pgadmin host:5050
 import unprotected homarr host:17575
 import unprotected jellyseerr host:15055
-import unprotected sonarr host:18989
 
 (authentik) {
 	reverse_proxy /outpost.goauthentik.io/* http://host:19000
@@ -65,13 +64,14 @@ import unprotected sonarr host:18989
 	}
 }
 
+import protected ha host:8123 # homeassistant
+import protected sonarr host:18989
 import protected app host:12345
 import protected dagster host:3000
 import protected photoprism host:2342
 import protected qbittorrent host:9092
 import protected esp host:6052
 import protected dsmr host:8888
-import protected ha host:8123 # homeassistant
 
 insecure.rik.veenboer.xyz {
 	route {
diff --git a/sonarr/config.xml b/sonarr/config.xml
index c4f5cbd..98bc0cf 100644
--- a/sonarr/config.xml
+++ b/sonarr/config.xml
@@ -11,8 +11,8 @@
   <LaunchBrowser>False</LaunchBrowser>
   <UpdateMechanism>Docker</UpdateMechanism>
   <AnalyticsEnabled>False</AnalyticsEnabled>
-  <AuthenticationRequired>Enabled</AuthenticationRequired>
   <InstanceName>Sonarr</InstanceName>
   <SslCertPath></SslCertPath>
   <SslCertPassword></SslCertPassword>
+  <AuthenticationRequired>DisabledForLocalAddresses</AuthenticationRequired>
 </Config>
\ No newline at end of file