diff --git a/kubernetes/apps/production/arr/radarr/ingress.yaml b/kubernetes/apps/production/arr/radarr/ingress.yaml
index 2dd2c50..96550d9 100644
--- a/kubernetes/apps/production/arr/radarr/ingress.yaml
+++ b/kubernetes/apps/production/arr/radarr/ingress.yaml
@@ -5,7 +5,7 @@ metadata:
   namespace: arr
   annotations:
     nginx.ingress.kubernetes.io/auth-url: |-
-        http://ak-outpost-proxy.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
+        http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
     nginx.ingress.kubernetes.io/auth-signin: |-
         https://radarr.local.mafyuh.dev/outpost.goauthentik.io/start?rd=$escaped_request_uri
     nginx.ingress.kubernetes.io/auth-response-headers: |-
@@ -18,6 +18,13 @@ spec:
     - host: "radarr.local.mafyuh.dev"
       http:
         paths:
+          - path: /outpost.goauthentik.io
+            pathType: Prefix
+            backend:
+              service:
+                name: authentik-server
+                port:
+                  number: 80
           - path: /
             pathType: Prefix
             backend:
diff --git a/kubernetes/apps/production/nginx/helmrelease.yaml b/kubernetes/apps/production/nginx/helmrelease.yaml
index 2889362..06ded69 100644
--- a/kubernetes/apps/production/nginx/helmrelease.yaml
+++ b/kubernetes/apps/production/nginx/helmrelease.yaml
@@ -20,5 +20,6 @@ spec:
       config:
         annotations-risk-level: "Critical"
         enable-annotation-validation: false
+        strict-validate-path-type: false
         service:
           type: LoadBalancer