diff --git a/Caddyfile b/Caddyfile
index 5a0b832..f43f9df 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -40,7 +40,7 @@ media.hubris.network {
 		dns ionos {env.IONOS_AUTH_API_TOKEN}
 	}
 	# API and streaming paths — no Authentik (Jellyfin apps use their own auth)
-	@api path /api/* /socket /Audio/* /Videos/* /Items/* /Users/* /Sessions/* /System/* /LiveTv/* /Music/* /Artists/* /Albums/* /Playlists/* /Images/* /Subtitle* /videos/* /audio/*
+	@api path /api/* /socket /Audio/* /Videos/* /Items/* /Users/* /Sessions/* /System/* /LiveTv/* /Music/* /Artists/* /Albums/* /Playlists/* /Images/* /Subtitle* /videos/* /audio/* /sso/* /SSO-Auth/*
 	handle @api {
 		reverse_proxy 192.168.8.206:8096
 	}