diff --git a/services/self_host/sso.nix b/services/self_host/sso.nix
index bac96d5..5b80b9b 100644
--- a/services/self_host/sso.nix
+++ b/services/self_host/sso.nix
@@ -74,7 +74,11 @@ in
           AUTHENTIK_REDIS__PORT = 6380;
         };
       };
-      redis.servers."authentik".port = lib.mkForce 6380;
+      redis.servers."authentik" = {
+        enable = true;
+        bind = "127.0.0.1";
+        port = lib.mkForce 6380;
+      };
       postgresql = {
         enable = true;
         ensureDatabases = [