I recently configured forward auth with Authentik and Envoy Gateway and found the process troublesome enough to warrant a post. If you've been thinking about doing the same then maybe this post will save some time.