Removed custom server.endpoints.authz.forward-auth configuration and simplified session setup to match the official Authelia + Traefik blog post example. Key changes: - Removed server.endpoints configuration (use defaults) - Added session.name at top level - Simplified session.cookies to only domain and authelia_url - Removed custom expiration/inactivity settings This should enable proper 302 redirects for browsers instead of 401 responses with Location headers. Reference: https://www.authelia.com/blog/authelia--traefik-setup-guide/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>