diff --git a/cluster/apps/authentik/network_policy.yaml b/cluster/apps/authentik/network_policy.yaml
index b9bad9a..1ffe177 100644
--- a/cluster/apps/authentik/network_policy.yaml
+++ b/cluster/apps/authentik/network_policy.yaml
@@ -24,6 +24,10 @@ spec:
         matchLabels:
           name: "database"
 
+    - namespaceSelector:
+        matchLabels:
+          name: "media"
+
     # Allow all pods with this label
     - podSelector:
         matchLabels: