diff --git a/cluster/apps/download/sonarr/ingress.yaml b/cluster/apps/download/sonarr/ingress.yaml
index 1d311bf..d26ef19 100644
--- a/cluster/apps/download/sonarr/ingress.yaml
+++ b/cluster/apps/download/sonarr/ingress.yaml
@@ -6,6 +6,7 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-production"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik
 spec:
   rules:
     - host: "k3sson.***REMOVED***"