Traefik reverse-proxy config

Does someone have a **working configuration** to use Authentik behind **Traefik as reverse-proxy**? The documentation at https://docs.goauthentik.io/install-config/reverse-proxy/ only lists an example config for nginx.

I tried to translate this into an equivalent Traefik config, but I get some strange behavior with Authentik Proxy Providers: I get redirect for auth to Authentik as intended, and after logging in with Authentik I get redirected to another unrelated service that I also use with a proxy provider.

The above issue does _not_ occur, when I just use TCP forwarding via Traefik. Therefore, I suspect that some headers are not correctly set by Traefik. If someone has a working config, it would be great if they can share it. :)

**Relevant info**
I think it is not relevant, but for completeness: Authentik itself is only reachable via TLS (certificate imported to Authentik), i.e., Traefik terminates incoming TLS and opens a new TLS connection to connect to Authentik.

**Version and Deployment (please complete the following information):**

- authentik version: 2025.8.1
- Deployment: docker-compose