diff --git a/hosts/architect/sonarr.nix b/hosts/architect/sonarr.nix
index 0c7b9d1..58a6b5b 100644
--- a/hosts/architect/sonarr.nix
+++ b/hosts/architect/sonarr.nix
@@ -9,12 +9,15 @@ in
     group = "media";
   };
 
-  architect.vhost.${domain} = {
+  architect.vhost.${domain} = with config.architect.networks; {
     dnsInterfaces = [ "tailscale" ];
 
     locations."/" = {
       port = 8989;
       allowLan = true;
+      allow = [
+        tailscale.net
+      ];
     };
   };