diff --git a/modules/server/containers/apps/authentik.nix b/modules/server/containers/apps/authentik.nix
index 40028e1..9179a9c 100644
--- a/modules/server/containers/apps/authentik.nix
+++ b/modules/server/containers/apps/authentik.nix
@@ -10,6 +10,8 @@ let
     };
   };
 in {
+  sops = true;
+  db = true;
   paths = [{
     path="${serverCfg.configPath}/authentik/media";
     owner = "1000:1000";
@@ -25,7 +27,6 @@ in {
       subdomain = containerCfg.subdomain;
       image = "ghcr.io/goauthentik/server:${version}";
       port = 9000;
-      ip = containerCfg.ip;
       secret = name;
       extraEnv = {
         "AUTHENTIK_REDIS__HOST" = builder.host;