diff --git a/swarm/services.yml b/swarm/services.yml
index 8f4bd9b..be4f822 100644
--- a/swarm/services.yml
+++ b/swarm/services.yml
@@ -53,15 +53,22 @@ services:
         - traefik.constraint-label=traefik-public
         - traefik.http.routers.dozzle.entrypoints=https
         - traefik.http.routers.dozzle.rule=Host(`log.${DOMAIN}`)
-        - traefik.http.routers.dozzle.middlewares=admin-auth
+        - traefik.http.routers.dozzle.priority=10
+        - traefik.http.routers.dozzle.middlewares=authentik@file
         - traefik.http.routers.dozzle.tls.certresolver=le
         - traefik.http.routers.dozzle.service=dozzle_service
         - traefik.http.routers.dozzle_local.entrypoints=https
         - traefik.http.routers.dozzle_local.rule=Host(`log.${LOCALDOMAIN}`)
+        - traefik.http.routers.dozzle_local.priority=10
         - traefik.http.routers.dozzle_local.middlewares=admin-auth
         - traefik.http.routers.dozzle_local.tls=true
         - traefik.http.routers.dozzle_local.service=dozzle_service
+        - traefik.http.routers.dozzle_auth.entrypoints=https
+        - traefik.http.routers.dozzle_auth.rule="Host(`log.${DOMAIN}`) && PathPrefix(`/outpost.goauthentik.io/`)"
+        - traefik.http.routers.dozzle_auth.priority=20
+        - traefik.http.routers.dozzle_auth.service=authentik-svc
         - traefik.http.services.dozzle_service.loadbalancer.server.port=8080
+        - traefik.http.services.authentik-svc.loadbalancer.url="http://authentik-server:9000/outpost.goauthentik.io"
 
   minio-common:
     image: minio/minio:latest