# Help with authentik (middleware-manager discussion #20)

**URL:** <https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658>\
**Category:** Middleware Manager\
**Tags:** discussion\
**Created:** [April 22, 2025, 11:50pm UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658 "2025-04-22T23:50:21Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 22, 2025, 11:50pm UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/1 "2025-04-22T23:50:21Z")

</div>

> 💬 **GitHub discussion [middleware-manager #20](https://github.com/hhftechnology/middleware-manager/discussions/20)** in _Q&A_, started by **`chrispazz`** on GitHub

Hello, I deployed your great addition to pangolin.

However I can’t have my existing Authentik working with Traefik.  
I made all setup in authentik and with middleware-manager I personalised the middleware Authentik with my auth URL and added it to a specific resource.

However, trying to reach the URL resource, it seems to ignore authentik.

Do I have to configure something also in static or dynamic Traefik configuration files or using the middleware-manager is enough?

Thank you  
C.

* * *

💬 Join in here or [on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20).

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 23, 2025, 10:47am UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/2 "2025-04-23T10:47:25Z")

</div>

**`hhftechnology`** [commented on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-12977146):

> Below will go on your Authentik Instance. to use Authentik for auth with traefik on separate hosts and using domain names, you’ll need to configure Traefik’s forwardAuth middleware and Authentik’s application settings accordingly. this involves defining the Authentik host (including the protocol and port), specifying the application’s URL, and configuring Traefik to trust the Forwarded header.
> 
> ```yaml
> # traefik.yml
> providers:
> file:
> filename: /etc/traefik/dynamic/config.yml
> 
> # ... other configurations ...
> 
> entryPoints:
> web:
> address: ":80"
> websecure:
> address: ":443"
> http:
> redirections:
> entryPoint: websecure
> scheme: https
> 
> # ... other entryPoints configurations ...
> 
> # Middlewares for Forward Auth
> middlewares:
> authentik-auth:
> forwardAuth:
> address: "https://authentik.example.com:9000/akprox/auth/traefik" # Replace with your Authentik domain and path
> trustForwardHeader: true
> authResponseHeaders:
> - X-Authentik-Username
> - X-Authentik-Groups
> - X-Authentik-Email
> - X-Authentik-Name
> - X-Authentik-Uid
> - X-Authentik-Jwt
> - X-Authentik-Meta-Jwks
> - X-Authentik-Meta-Outpost
> - X-Authentik-Meta-Provider
> - X-Authentik-Meta-App
> - X-Authentik-Meta-Version
> 
> # Routers and Services (example)
> http:
> routers:
> authentik-router:
> rule: "Host(`authentik.example.com`)"
> entryPoints:
> - websecure
> service: authentik-service
> middlewares:
> - authentik-auth
> protected-app-router:
> rule: "Host(`app.example.com`)"
> entryPoints:
> - websecure
> service: protected-app-service
> middlewares:
> - authentik-auth
> services:
> authentik-service:
> loadbalancer:
> server:
> port: 9000
> protected-app-service:
> loadbalancer:
> server:
> port: 8080 # Replace with your application's port 443 or which you have put as entrypoint 
> 
> ```

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 23, 2025, 11:36am UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/3 "2025-04-23T11:36:43Z")

</div>

**`chrispazz`** [commented on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-12977147):

> Ok, I was missing a lot of modifications 🙂
> 
> Now it works but using in authentik Forward Auth at domain level, after authentication it always return to authentik dashboard instead of the single app…

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 23, 2025, 11:44am UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/4 "2025-04-23T11:44:51Z")

</div>

**`hhftechnology`** [commented on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-12977148):

> mine works swiftly with above code. i have different auths for different sites in pangolin. ping me on my cord [HHF Technology](https://discord.gg/HDCt9MjyMJ)

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 25, 2025, 5:09pm UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/5 "2025-04-25T17:09:33Z")

</div>

**`qwasy`** [commented on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-12977149):

> Can you share your code, or make some example files for other authenticators? Like in a git wiki here, or so.  
> I’m trying to use pangolin with middleware-manager and authelia, but everytime I add some configs, pangolin/traefik breaks…  
> But I’m no expert with traefik, so maybe I’m the problem 😃

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 26, 2025, 1:51pm UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/6 "2025-04-26T13:51:14Z")

</div>

**`hhftechnology`** [commented on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-12977150):

> once i get time will write a detailed wiki

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [April 29, 2025, 6:27am UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/7 "2025-04-29T06:27:11Z")

</div>

**`hhftechnology`** [commented on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-12977151):

> i will move this issue to discussion

---

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [February 17, 2026, 1:53am UTC](https://forum.hhf.technology/t/help-with-authentik-middleware-manager-discussion-20/4658/8 "2026-02-17T01:53:59Z")

</div>

**`Roving-Ronin`** [replied in a thread on GitHub](https://github.com/hhftechnology/middleware-manager/discussions/20#discussioncomment-15829541) to **`hhftechnology`** :

> @​hhftechnology Is this still valid for use with Middleware Manager v4 and its API control method?
