diff --git a/services/authentik.hcl b/services/authentik.hcl
index baa66ad..4ab9961 100644
--- a/services/authentik.hcl
+++ b/services/authentik.hcl
@@ -4,7 +4,8 @@ job "authentik" {
   group "auth" {
     network {
       port "http" {
-        to = 9000
+        # traefik forwardAuth hardcodes this port
+        static = 9000
       }
       port "https" {
         to = 9443