diff --git a/config/arrstack_secret_backend_role/arrstack/all.yaml b/config/arrstack_secret_backend_role/arrstack/all.yaml
index ca37d39..62287d9 100644
--- a/config/arrstack_secret_backend_role/arrstack/all.yaml
+++ b/config/arrstack_secret_backend_role/arrstack/all.yaml
@@ -1,9 +1,9 @@
 ---
 # Mints an arrproxy API key scoped to all three arr apps.
 apps:
-  - sonarr
-  - radarr
   - prowlarr
+  - radarr
+  - sonarr
 ttl: 60        # seconds (1m); short-lived by design, renewed on demand
 max_ttl: 86400 # seconds (24h); the engine additionally caps renewal at the
                # arrproxy admin token's fixed mint expiry.