This is the way. My setup is very similar except I only use authentik for Nextcloud. I don't expose my "arr" services to the Internet so I don't feel it necessary to put them behind authentik, although I could if I wanted.
Using Duo's free 10 personal licenses is also great as it can also plug into authentik for MFA through the solution.
I had an issue with my launch day PS2 when it was still in circulation. Thankfully the fix was to open up the console and flip a toggle switch to allow it to read both both DVD and PS2 games again. Console is still going strong to this day for me.