auth selfmark

modules/server/containers/apps/selfmark.nix

@@ -77,6 +77,11 @@ in {
         EXT_BYPASSER_PATH = "/v1";
         EXT_BYPASSER_TIMEOUT = "60000";
       };
+
+      extraLabels = { 
+      } // (if serverCfg.containers ? authentik then {
+        "traefik.http.routers.${containerCfg.subdomain}.middlewares" = "authentik";
+      } else {});
       overrides = {
         volumes = [ ];
        };