diff --git a/modules/server/containers/apps/authentik.nix b/modules/server/containers/apps/authentik.nix
index 86e3cc6..0679094 100644
--- a/modules/server/containers/apps/authentik.nix
+++ b/modules/server/containers/apps/authentik.nix
@@ -24,7 +24,7 @@ in {
     server = builder.mkContainer {
       subdomain = containerCfg.subdomain;
       image = "ghcr.io/goauthentik/server:${version}";
-      port = containerCfg.port;
+      port = 9000;
       ip = containerCfg.ip;
       secret = name;
       extraEnv = {
@@ -44,7 +44,7 @@ in {
       };
       overrides = {
         cmd = [ "server" ];
-        ports = if containerCfg.pubPort!=null && containerCfg.port!=null then [ "${toString containerCfg.pubPort}:${toString containerCfg.port}" ] else [];
+        ports = if containerCfg.port!=null then [ "${toString containerCfg.port}:9000" ] else [];
         volumes = [
           "${serverCfg.configPath}/authentik/media:/media"
           "${serverCfg.configPath}/authentik/templates:/templates"