- enable PKCE in the authelia client example - fix the authelia and authentik issuer URLs to point at the identity provider host instead of the immich host - remove the `.well-known` suffix to homogenize with the Google and Keycloak examples