How I Migrated From Authentik to Pocket ID With TinyAuth on NixOS

A while back I wrote about how I set up Authentik forward auth with Traefik on NixOS . It worked, but over time Authentik got a bit heavy for what I actually needed from it, i.e. one identity provider and a forward auth in front of a few self-hosted apps. So I swapped it out for Pocket ID (a small OIDC provider) and TinyAuth (a tiny forward auth that talks to it). This post is the sequel to that…