Getting 404 page not found for authentik behind traefik

Update, I have absolutely no idea why and how BUT I managed to get to authentik's dashboard with these labels

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.authentik.entrypoints=web_internal"
      - "traefik.http.routers.authentik.rule=Host(`auth.mydomain.com`)"
      - "traefik.http.routers.authentik-secure.entrypoints=websecure_internal"
      - "traefik.http.routers.authentik-secure.rule=Host(`auth.mydomain.com`)||HostRegexp(`{subdomain:[a-z0-9-]+}.mydomain.com`) && PathPrefix(`/outpost.goauthentik.io/`)"
      - "traefik.http.routers.authentik-secure.tls=true"
      - "traefik.http.routers.authentik-secure.tls.certresolver=cloudflare"
      - "traefik.http.services.authentik.loadbalancer.server.port=9000"
      - "traefik.docker.network=frontend"

I further investigated, slowly applying my middleware, everything worked and then I found my security-headers broke it, so I discovered that

        customRequestHeaders:
          Upgrade: websocket

upgrade websocket broke it completely.
I will admit that I copied this entire security headers from a tutorial and I do no understand what they mean or do. I will read up upon them!