diff --git a/hosts/library/default.nix b/hosts/library/default.nix
index a529a63..29d2fdc 100644
--- a/hosts/library/default.nix
+++ b/hosts/library/default.nix
@@ -113,7 +113,7 @@ with lib.my;
     lidarr = {
       image = "lscr.io/linuxserver/lidarr:latest";
       autoStart = true;
-      ports = [ "8686:8686/tcp" ];
+      ports = [ "127.0.0.1:8686:8686/tcp" ];
       environment = {
         PUID = "0";
         PGID = "1000";
@@ -134,7 +134,7 @@ with lib.my;
     ombi = {
       image = "lscr.io/linuxserver/ombi:latest";
       autoStart = true;
-      ports = [ "3579:3579/tcp" ];
+      ports = [ "127.0.0.1:3579:3579/tcp" ];
       environment = {
         BASE_URL = "/requests";
       };
@@ -149,7 +149,7 @@ with lib.my;
     prowlarr = {
       image = "lscr.io/linuxserver/prowlarr:latest";
       autoStart = true;
-      ports = [ "9696:9696/tcp" ];
+      ports = [ "127.0.0.1:9696:9696/tcp" ];
       volumes = [
         "prowlarr-config:/config:Z"
       ];
@@ -161,9 +161,9 @@ with lib.my;
       image = "cr.hotio.dev/hotio/qbittorrent:latest";
       autoStart = true;
       ports = [
-        "8080:8080/tcp"
-        "6881:6881/tcp"
-        "6881:6881/udp"
+        "127.0.0.1:8080:8080/tcp"
+        "127.0.0.1:6881:6881/tcp"
+        "127.0.0.1:6881:6881/udp"
       ];
       environment = {
         PUID = "1000";
@@ -180,7 +180,7 @@ with lib.my;
     radarr = {
       image = "lscr.io/linuxserver/radarr:latest";
       autoStart = true;
-      ports = [ "7878:7878/tcp" ];
+      ports = [ "127.0.0.1:7878:7878/tcp" ];
       environment = {
         PUID = "0";
         PGID = "1000";
@@ -201,7 +201,7 @@ with lib.my;
     sonarr = {
       image = "lscr.io/linuxserver/sonarr:latest";
       autoStart = true;
-      ports = [ "8989:8989/tcp" ];
+      ports = [ "127.0.0.1:8989:8989/tcp" ];
       environment = {
         PUID = "0";
         PGID = "1000";