diff --git a/modules/server/containers/apps/authentik.nix b/modules/server/containers/apps/authentik.nix
index b5fafc0..86e3cc6 100644
--- a/modules/server/containers/apps/authentik.nix
+++ b/modules/server/containers/apps/authentik.nix
@@ -6,7 +6,7 @@ let
     name = "authentik"; dir = "authentik"; vars = {
       NEXTCLOUD_DOMAIN = "${serverCfg.containers.nextcloud.subdomain or "nextcloud"}.${serverCfg.hostDomain}";
       AUTHENTIK_DOMAIN = "${containerCfg.subdomain}.${serverCfg.hostDomain}";
-      COOKIE_DOMAIN = "*.${serverCfg.hostDomain}";
+      COOKIE_DOMAIN = "${serverCfg.hostDomain}";
     };
   };
 in {
diff --git a/modules/server/containers/apps/etherpad.nix b/modules/server/containers/apps/etherpad.nix
index afef100..5e7cf50 100644
--- a/modules/server/containers/apps/etherpad.nix
+++ b/modules/server/containers/apps/etherpad.nix
@@ -105,6 +105,7 @@ in {
         DB_HOST = builder.host;
         DB_NAME = "etherpad_db";
         DB_USER = "etherpad_user";
+        HOME = "/opt";
         TRUST_PROXY = "true";
         DB_CHARSET = "utf8mb4";
         DEFAULT_PAD_TEXT = "";
@@ -112,9 +113,6 @@ in {
         PAD_OPTIONS_USE_MONOSPACE_FONT = "true";
         SKIN_VARIANTS = "super-dark-toolbar light-editor dark-background";
       };
-      extraLabels = {
-        "traefik.http.routers.${containerCfg.subdomain}.middlewares" = "authentik";
-      };
       overrides = { };
     };
   };