Update, I have absolutely no idea why and how BUT I managed to get to authentik's dashboard with these labels
labels:
- "traefik.enable=true"
- "traefik.http.routers.authentik.entrypoints=web_internal"
- "traefik.http.routers.authentik.rule=Host(`auth.mydomain.com`)"
- "traefik.http.routers.authentik-secure.entrypoints=websecure_internal"
- "traefik.http.routers.authentik-secure.rule=Host(`auth.mydomain.com`)||HostRegexp(`{subdomain:[a-z0-9-]+}.mydomain.com`) && PathPrefix(`/outpost.goauthentik.io/`)"
- "traefik.http.routers.authentik-secure.tls=true"
- "traefik.http.routers.authentik-secure.tls.certresolver=cloudflare"
- "traefik.http.services.authentik.loadbalancer.server.port=9000"
- "traefik.docker.network=frontend"
I further investigated, slowly applying my middleware, everything worked and then I found my security-headers broke it, so I discovered that
customRequestHeaders:
Upgrade: websocket
upgrade websocket broke it completely.
I will admit that I copied this entire security headers from a tutorial and I do no understand what they mean or do. I will read up upon them!