diff --git a/docker-compose.yml b/docker-compose.yml
index 414bb46..12839cc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,10 +10,19 @@ services:
       - TZ=Asia/Jerusalem
     volumes:
       - ./radarr/config:/config
-      - /Red-Vol/Torrents/Movies:/movies #optional
+      - /Red-Vol/Torrents/:/torrents #optional
     ports:
       - 7878:7878
     restart: unless-stopped
+    networks:
+      - network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=arr_network"
+      - "traefik.http.routers.radarr.entrypoints=websecure"
+      - "traefik.http.routers.radarr.rule=Host(`movies.pukeko.xyz`)"
+      - "traefik.http.routers.radarr.tls.certresolver=pukekoresolver"
+      - "traefik.http.routers.radarr.middlewares=authelia@docker"
   bazarr:
     image: ghcr.io/linuxserver/bazarr
     container_name: bazarr_server
@@ -23,11 +32,19 @@ services:
       - TZ=Asia/Jerusalem
     volumes:
       - ./bazarr/config:/config
-      - /Red-Vol/Torrents/Movies:/movies #optional
-      - "/Red-Vol/Torrents/TV Shows:/tv" #optional
+      - /Red-Vol/Torrents/:/torrents #optional
     ports:
       - 6767:6767
     restart: unless-stopped
+    networks:
+      - network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=arr_network"
+      - "traefik.http.routers.sub.entrypoints=websecure"
+      - "traefik.http.routers.sub.rule=Host(`subtitles.pukeko.xyz`)"
+      - "traefik.http.routers.sub.tls.certresolver=pukekoresolver"
+      - "traefik.http.routers.sub.middlewares=authelia@docker"
   sonarr:
     image: ghcr.io/linuxserver/sonarr
     container_name: sonarr_server
@@ -37,10 +54,19 @@ services:
       - TZ=Asia/Jerusalem
     volumes:
       - ./sonarr/config:/config
-      - "/Red-Vol/Torrents/TV Shows:/tv" #optional
+      - "/Red-Vol/Torrents/:/torrents" #optional
     ports:
       - "8989:8989"
     restart: unless-stopped
+    networks:
+      - network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=arr_network"
+      - "traefik.http.routers.sonarr.entrypoints=websecure"
+      - "traefik.http.routers.sonarr.rule=Host(`tv.pukeko.xyz`)"
+      - "traefik.http.routers.sonarr.tls.certresolver=pukekoresolver"
+      - "traefik.http.routers.sonarr.middlewares=authelia@docker"
   prowlarr:
     image: ghcr.io/linuxserver/prowlarr:develop
     container_name: prowlarr
@@ -53,7 +79,37 @@ services:
     ports:
       - 9696:9696
     restart: unless-stopped
+    networks:
+      - network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=arr_network"
+      - "traefik.http.routers.prowlarr.entrypoints=websecure"
+      - "traefik.http.routers.prowlarr.rule=Host(`index.pukeko.xyz`)"
+      - "traefik.http.routers.prowlarr.tls.certresolver=pukekoresolver"
+      - "traefik.http.routers.prowlarr.middlewares=authelia@docker"
+  readarr:
+    image: ghcr.io/linuxserver/readarr:develop
+    container_name: readarr
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Asia/Jerusalem
+    volumes:
+      - ./readarr/config:/config
+      - /Red-Vol/Torrents/:/torrents #optional
+    ports:
+      - 8787:8787
+    restart: unless-stopped
+    networks:
+      - network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=arr_network"
+      - "traefik.http.routers.readarr.entrypoints=websecure"
+      - "traefik.http.routers.readarr.rule=Host(`read.pukeko.xyz`)"
+      - "traefik.http.routers.readarr.tls.certresolver=pukekoresolver"
+      - "traefik.http.routers.readarr.middlewares=authelia@docker"
 networks:
-  default:
-    external: true
-    name: takahe_network
+  network:
+    driver: bridge