diff --git a/nixos/components/network/tinc/private.nix b/nixos/components/network/tinc/private.nix
index 962d750..248ea07 100644
--- a/nixos/components/network/tinc/private.nix
+++ b/nixos/components/network/tinc/private.nix
@@ -24,6 +24,9 @@ let
     "sync.robi" = hosts.robi;
     "transmission.robi" = hosts.robi;
     "transmission2.robi" = hosts.robi;
+    "sonarr.robi" = hosts.robi;
+    "radarr.robi" = hosts.robi;
+    "tadarr.robi" = hosts.robi;
     # pepe
     "grafana.pepe" = hosts.pepe;
     "loki.pepe" = hosts.pepe;
diff --git a/nixos/machines/robi/configuration.nix b/nixos/machines/robi/configuration.nix
index 98661a4..862f7e2 100644
--- a/nixos/machines/robi/configuration.nix
+++ b/nixos/machines/robi/configuration.nix
@@ -33,6 +33,7 @@
     ./media-syncthing.nix
     ./media-transmission.nix
     ./media-transmission2.nix
+    ./media-arr.nix
 
     ./social-jitsi.nix
 
diff --git a/nixos/machines/robi/media-arr.nix b/nixos/machines/robi/media-arr.nix
new file mode 100644
index 0000000..229bc18
--- /dev/null
+++ b/nixos/machines/robi/media-arr.nix
@@ -0,0 +1,38 @@
+{ config, ... }:
+{
+  services.sonarr = {
+    enable = true;
+    group = "media";
+    user = "media";
+  };
+
+  services.radarr = {
+    enable = true;
+    group = "media";
+    user = "media";
+  };
+
+  services.nginx.virtualHosts = {
+    "radarr.${config.networking.hostName}.private" = {
+      extraConfig = ''
+        allow ${config.tinc.private.subnet};
+        deny all;
+      '';
+      locations."/" = {
+        proxyPass = "http://localhost:7878";
+        proxyWebsockets = true;
+      };
+    };
+    "sonarr.${config.networking.hostName}.private" = {
+      extraConfig = ''
+        allow ${config.tinc.private.subnet};
+        deny all;
+      '';
+      locations."/" = {
+        proxyPass = "http://localhost:8989";
+        proxyWebsockets = true;
+      };
+    };
+  };
+
+}