diff --git a/configuration.nix b/configuration.nix
index 2daa01f..4568963 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -106,6 +106,7 @@
   users.users.radarr.extraGroups = [ "aria2" ];
   users.users.readarr.extraGroups = [ "aria2" ];
   users.users.sonarr.extraGroups = [ "aria2" ];
+  users.users.bazarr.extraGroups = [ "aria2" ];
   systemd.tmpfiles.rules = [
     "d /zroot/media 0770 - multimedia - -"
   ];
@@ -115,6 +116,7 @@
   services.radarr   = { enable = true; group = "multimedia"; };
   services.readarr  = { enable = true; group = "multimedia"; };
   services.sonarr   = { enable = true; group = "multimedia"; };
+  services.bazarr   = { enable = true; group = "multimedia"; };
   services.prowlarr = { enable = true; };
 
   systemd.services."netns@" = {
@@ -516,6 +518,13 @@
       }
       respond 403
     '';
+    virtualHosts."baz.arr.samsehu.perli.casa".extraConfig = ''
+      @connected_via_tailscale remote_ip 100.64.0.0/10 fd7a:115c:a1e0::/48
+      handle @connected_via_tailscale {
+        reverse_proxy localhost:6767
+      }
+      respond 403
+    '';
     virtualHosts."prowl.arr.samsehu.perli.casa".extraConfig = ''
       @connected_via_tailscale remote_ip 100.64.0.0/10 fd7a:115c:a1e0::/48
       handle @connected_via_tailscale {
@@ -561,6 +570,7 @@
           { name = "rad.arr.samsehu.perli.casa"; type = "A"; value = "100.64.0.3"; }
           { name = "read.arr.samsehu.perli.casa"; type = "A"; value = "100.64.0.3"; }
           { name = "son.arr.samsehu.perli.casa"; type = "A"; value = "100.64.0.3"; }
+          { name = "baz.arr.samsehu.perli.casa"; type = "A"; value = "100.64.0.3"; }
           { name = "prowl.arr.samsehu.perli.casa"; type = "A"; value = "100.64.0.3"; }
         ];
       };