diff --git a/kubernetes/apps/production/arr/radarr/ingress.yaml b/kubernetes/apps/production/arr/radarr/ingress.yaml
index 2a80290..303ce71 100644
--- a/kubernetes/apps/production/arr/radarr/ingress.yaml
+++ b/kubernetes/apps/production/arr/radarr/ingress.yaml
@@ -5,13 +5,13 @@ metadata:
   namespace: arr
   annotations:
     nginx.ingress.kubernetes.io/auth-url: |-
-       https://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9443/outpost.goauthentik.io/auth/nginx
+        http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
     nginx.ingress.kubernetes.io/auth-signin: |-
-       https://radarr.local.mafyuh.dev/outpost.goauthentik.io/start?rd=$escaped_request_uri
+        https://radarr.local.mafyuh.dev/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
     nginx.ingress.kubernetes.io/auth-response-headers: |-
-       Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
+        Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-entitlements,X-authentik-email,X-authentik-name,X-authentik-uid
     nginx.ingress.kubernetes.io/auth-snippet: |
-       proxy_set_header X-Forwarded-Host $http_host;
+        proxy_set_header X-Forwarded-Host $http_host;
 spec:
   ingressClassName: nginx
   rules: