diff --git a/traefik/sonarr-middleware.yaml b/traefik/sonarr-middleware.yaml
new file mode 100644
index 0000000..d857e5a
--- /dev/null
+++ b/traefik/sonarr-middleware.yaml
@@ -0,0 +1,23 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: sonarr
+  namespace: authentik
+spec:
+  forwardAuth:
+    address: https://sonarr.michaelthomson.dev/outpost.goauthentik.io/auth/traefik
+    trustForwardHeader: true
+    authResponseHeaders:
+    - X-authentik-username
+    - X-authentik-groups
+    - X-authentik-email
+    - X-authentik-name
+    - X-authentik-uid
+    - X-authentik-jwt
+    - X-authentik-meta-jwks
+    - X-authentik-meta-outpost
+    - X-authentik-meta-provider
+    - X-authentik-meta-app
+    - X-authentik-meta-version
+    tls:
+      certSecret: letsencrypt-wildcard-cert-michaelthomson.dev