All of Authentik's applications (including Tailscale's tailnet login) have moved to Pocket ID, and its only recent sign-ins were those handovers. Drops its stack, the auth. route and DNS record, the auth subdomain variables, Gotify's leftover hairpin entries, and the dockcheck exclude; the docs now name Pocket ID as the SSO provider. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>