diff --git a/modules/server/containers/apps/servarr.nix b/modules/server/containers/apps/servarr.nix
index 88f5d54..99feefa 100644
--- a/modules/server/containers/apps/servarr.nix
+++ b/modules/server/containers/apps/servarr.nix
@@ -39,8 +39,16 @@ in {
       subdomain = containerCfg.subdomain;
       subpath = "prowlarr";
       imageStream = images.prowlarr;
-      port = 9696;
+      port = 8989;
       secret = name;
+      extraEnv = {
+        "PROWLARR__APP__INSTANCENAME" = "Prowlarr";
+        # "PROWLARR__AUTH__ENABLED" = "false";
+        "PROWLARR__AUTH__METHOD" = "external";
+        "PROWLARR__SERVER__PORT" = "8989";
+        "PROWLARR__SERVER__URLBASE" = "prowlarr";
+        "PROWLARR__SERVER__ENABLESSL" = "false";
+      };
       extraOptions = [
         "--tmpfs=/tmp:rw,noexec,nosuid,size=512m"
       ];
@@ -51,8 +59,16 @@ in {
       subdomain = containerCfg.subdomain;
       subpath = "radarr";
       imageStream = images.radarr;
-      port = 7878;
+      port = 8989;
       secret = name;
+      extraEnv = {
+        "RADARR__APP__INSTANCENAME" = "Radarr";
+        # "RADARR__AUTH__ENABLED" = "false";
+        "RADARR__AUTH__METHOD" = "external";
+        "RADARR__SERVER__PORT" = "8989";
+        "RADARR__SERVER__URLBASE" = "radarr";
+        "RADARR__SERVER__ENABLESSL" = "false";
+      };
       extraOptions = [
         "--tmpfs=/tmp:rw,noexec,nosuid,size=512m"
       ];
@@ -65,6 +81,14 @@ in {
       imageStream = images.sonarr;
       port = 8989;
       secret = name;
+      extraEnv = {
+        "SONARR__APP__INSTANCENAME" = "Sonarr";
+        # "SONARR__AUTH__ENABLED" = "false";
+        "SONARR__AUTH__METHOD" = "external";
+        "SONARR__SERVER__PORT" = "8989";
+        "SONARR__SERVER__URLBASE" = "sonarr";
+        "SONARR__SERVER__ENABLESSL" = "false";
+      };
       extraOptions = [
         "--tmpfs=/tmp:rw,noexec,nosuid,size=512m"
       ];
diff --git a/modules/server/sops/example.server.yaml b/modules/server/sops/example.server.yaml
index 36b9e2b..2ba074b 100644
--- a/modules/server/sops/example.server.yaml
+++ b/modules/server/sops/example.server.yaml
@@ -36,3 +36,6 @@ UMAMI: |
   APP_SECRET=...
 IMMICH: |
   DB_URL = "postgresql://immich_user:...@localhost:5432/immich_db";
+SERVARR: |
+  SONARR__AUTH__APIKEY=...
+  RADARR__AUTH__APIKEY=...