diff --git a/linux/nebula/jellyfin.nix b/linux/nebula/jellyfin.nix
index 5793791..2a4df13 100644
--- a/linux/nebula/jellyfin.nix
+++ b/linux/nebula/jellyfin.nix
@@ -11,7 +11,7 @@ in
   services = {
     aria2 = {
       enable = true;
-      extraArguments = "--rpc-listen-all";
+      extraArguments = "--rpc-allow-origin-all --rpc-listen-all";
       rpcListenPort = ports.aria2;
       rpcSecretFile = config.sops.secrets.aria2.path;
     };
@@ -23,6 +23,7 @@ in
       enable = true;
       port = ports.jellyseerr;
     };
+    prowlarr.enable = true;
     radarr = {
       enable = true;
       user = usr;
diff --git a/linux/singularity/caddy.nix b/linux/singularity/caddy.nix
index cbadf9c..6c469a5 100644
--- a/linux/singularity/caddy.nix
+++ b/linux/singularity/caddy.nix
@@ -24,6 +24,12 @@
             "m.identity_server": { "base_url": "https://${mtfqdn}" }
           }`
         '';
+        "aria2.${dn}".extraConfig = ''
+          reverse_proxy /jsonrpc ${homeSrv "aria2"}
+          file_server {
+            root ${pkgs.ariang}/share/ariang
+          }
+        '';
         "forgejo.${dn}".extraConfig = ''
           reverse_proxy ${homeSrv "forgejo"}
         '';
@@ -33,6 +39,9 @@
         "jellyfin.${dn}".extraConfig = ''
           reverse_proxy ${homeSrv "jellyfin"}
         '';
+        "jellyseerr.${dn}".extraConfig = ''
+          reverse_proxy ${homeSrv "jellyseerr"}
+        '';
         ${msfqdn} = {
           extraConfig = ''
             file_server ${wn "acme-challenge"}/* {