diff --git a/modules/server/containers/apps/servarr.nix b/modules/server/containers/apps/servarr.nix
index efaeca8..58874a2 100644
--- a/modules/server/containers/apps/servarr.nix
+++ b/modules/server/containers/apps/servarr.nix
@@ -44,13 +44,14 @@ in {
       extraEnv = {
         "PROWLARR__APP__INSTANCENAME" = "Prowlarr";
         # "PROWLARR__AUTH__ENABLED" = "false";
-        "PROWLARR__AUTH__METHOD" = "external";
+        "PROWLARR__AUTH__METHOD" = "External";
         "PROWLARR__SERVER__PORT" = "8989";
         "PROWLARR__SERVER__URLBASE" = "prowlarr";
         "PROWLARR__SERVER__ENABLESSL" = "false";
       };
       extraOptions = [
         "--tmpfs=/tmp:rw,noexec,nosuid,size=512m"
+        "--user=1000:1000"
       ];
       overrides.volumes = sharedVolumes ++ [ "${serverCfg.configPath}/servarr/prowlarr:/config" ];
     };
@@ -64,13 +65,14 @@ in {
       extraEnv = {
         "RADARR__APP__INSTANCENAME" = "Radarr";
         # "RADARR__AUTH__ENABLED" = "false";
-        "RADARR__AUTH__METHOD" = "external";
+        "RADARR__AUTH__METHOD" = "External";
         "RADARR__SERVER__PORT" = "8989";
         "RADARR__SERVER__URLBASE" = "radarr";
         "RADARR__SERVER__ENABLESSL" = "false";
       };
       extraOptions = [
         "--tmpfs=/tmp:rw,noexec,nosuid,size=512m"
+        "--user=1000:1000"
       ];
       overrides.volumes = sharedVolumes ++ [ "${serverCfg.configPath}/servarr/radarr:/config" ];
     };
@@ -84,13 +86,14 @@ in {
       extraEnv = {
         "SONARR__APP__INSTANCENAME" = "Sonarr";
         # "SONARR__AUTH__ENABLED" = "false";
-        "SONARR__AUTH__METHOD" = "external";
+        "SONARR__AUTH__METHOD" = "External";
         "SONARR__SERVER__PORT" = "8989";
         "SONARR__SERVER__URLBASE" = "sonarr";
         "SONARR__SERVER__ENABLESSL" = "false";
       };
       extraOptions = [
         "--tmpfs=/tmp:rw,noexec,nosuid,size=512m"
+        "--user=1000:1000"
       ];
       overrides.volumes = sharedVolumes ++ [ "${serverCfg.configPath}/servarr/sonarr:/config" ];
     };