diff --git a/group_vars/private-oci-registry.yml b/group_vars/private-oci-registry.yml
new file mode 100644
index 0000000..0f7c1ed
--- /dev/null
+++ b/group_vars/private-oci-registry.yml
@@ -0,0 +1,16 @@
+oci_registry_auth_secret: >-
+  {{ lookup(
+    "cache",
+    "kubernetes.core.k8s",
+    kind="Secret",
+    namespace="default",
+    resource_name="imagepull-gitea"
+  ) }}
+
+oci_registry_auth: >-
+  {{ (oci_registry_auth_secret
+       .data[".dockerconfigjson"]
+       | b64decode
+       | from_json
+     ).auths["git.pyrocufflink.net"]
+  }}
diff --git a/group_vars/prowlarr.yml b/group_vars/prowlarr.yml
new file mode 100644
index 0000000..7e8330e
--- /dev/null
+++ b/group_vars/prowlarr.yml
@@ -0,0 +1,4 @@
+prowlarr_image_pull_username: >-
+  {{ oci_registry_auth.username }}
+prowlarr_image_pull_password: >-
+  {{ oci_registry_auth.password }}
diff --git a/group_vars/radarr.yml b/group_vars/radarr.yml
new file mode 100644
index 0000000..2328b65
--- /dev/null
+++ b/group_vars/radarr.yml
@@ -0,0 +1,8 @@
+radarr_path_mounts:
+- type=bind,src=/srv/cifs/Downloads/00aria2,dst=/media/downloads
+- type=bind,src=/srv/cifs/Movies,dst=/media/Movies
+
+radarr_image_pull_username: >-
+  {{ oci_registry_auth.username }}
+radarr_image_pull_password: >-
+  {{ oci_registry_auth.password }}
diff --git a/group_vars/servarr.yml b/group_vars/servarr.yml
new file mode 100644
index 0000000..d1e7776
--- /dev/null
+++ b/group_vars/servarr.yml
@@ -0,0 +1,9 @@
+fluent_bit_output_servarr:
+  name: http
+  alias: vlogs.servarr
+  match: servarr
+  uri: /insert/jsonline?_stream_fields=hostname,filename&_msg_field=log&_time_field=date
+
+fluent_bit_servarr_outputs:
+- >-
+  {{ fluent_bit_output_servarr | combine(fluent_bit_output_template_victorialogs) }}
diff --git a/group_vars/sonarr.yml b/group_vars/sonarr.yml
new file mode 100644
index 0000000..2ff3b45
--- /dev/null
+++ b/group_vars/sonarr.yml
@@ -0,0 +1,8 @@
+sonarr_path_mounts:
+- type=bind,src=/srv/cifs/Downloads/00aria2,dst=/media/downloads
+- type=bind,src='/srv/cifs/TV Shows',dst='/media/TV Shows'
+
+sonarr_image_pull_username: >-
+  {{ oci_registry_auth.username }}
+sonarr_image_pull_password: >-
+  {{ oci_registry_auth.password }}
diff --git a/hosts b/hosts
index 0997c32..e2fd32a 100644
--- a/hosts
+++ b/hosts
@@ -178,7 +178,13 @@ nvr2.pyrocufflink.blue
 [postgresql]
 db0.pyrocufflink.blue
 
+[private-oci-registry:children]
+prowlarr
+radarr
+sonarr
+
 [prowlarr]
+file0.pyrocufflink.blue
 
 [public-web]
 web0.pyrocufflink.blue
@@ -206,6 +212,7 @@ pyrocufflink
 [pyrocufflink-dhcp]
 
 [radarr]
+file0.pyrocufflink.blue
 
 [radius:children]
 samba-dc
@@ -254,6 +261,7 @@ smtp1.pyrocufflink.blue
 nextcloud
 
 [sonarr]
+file0.pyrocufflink.blue
 
 [squid]