diff --git a/jellyfin/arr-stack/docker-compose.yml b/jellyfin/arr-stack/docker-compose.yml
index 7a0ec29..0e7d787 100644
--- a/jellyfin/arr-stack/docker-compose.yml
+++ b/jellyfin/arr-stack/docker-compose.yml
@@ -6,8 +6,8 @@ services:
     ports:
       - "7878:7878"
     environment:
-      - PUID=112
-      - PGID=116
+      - PUID=1000
+      - PGID=1000
       - TZ=America/Chicago
     volumes:
       - /srv/docker/radarr/config:/config
@@ -20,8 +20,8 @@ services:
     ports:
       - "8989:8989"
     environment:
-      - PUID=112
-      - PGID=116
+      - PUID=1000
+      - PGID=1000
       - TZ=America/Chicago
     volumes:
       - /srv/docker/sonarr/config:/config
@@ -75,6 +75,10 @@ services:
       - WATCHTOWER_HTTP_API_PERIODIC_POLLS=false
       - WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s
 
+  # Separate scoped instance for prowlarr — staggered 5 min later to avoid
+  # concurrent lscr.io/ghcr.io rate limit bursts. Prowlarr must carry the
+  # com.centurylinklabs.watchtower.scope=prowlarr label (set above) so the
+  # main watchtower ignores it and only this instance manages it.
   watchtower-prowlarr:
     image: containrrr/watchtower
     container_name: watchtower-prowlarr