Not Found error - Reverse Proxy basic authentication Nginx

[StafLoker]

After configuration Authentik & Nginx, when redirect to Authentik, response Not Found error.

URL after redirection: https://auth.domain.com/outpost.goauthentik.io/start?rd=http://movie.download.domain.com/

Authentik configuration:

AUTHENTIK_HTTP=0.0.0.0:7701
AUTHENTIK_HTTPS=0.0.0.0:7700

Nginx configuration:

Reverse proxy of Authentik

upstream authentik {
    server 127.0.0.1:7700;
    # Improve performance by keeping some connections alive.
    keepalive 10;
}

# Upgrade WebSocket if requested, otherwise use keepalive
map $http_upgrade $connection_upgrade_keepalive {
    default upgrade;
    ''      '';
}

server {
    listen 80;
    server_name auth.domain.com;

    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name auth.domain.com;

    ssl_certificate /etc/letsencrypt/live/auth.domain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/auth.domain.com/privkey.pem;
    add_header Strict-Transport-Security "max-age=63072000" always;

    location / {
        proxy_http_version 1.1;
        include /etc/nginx/snippets/proxy.conf;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade_keepalive;
        proxy_pass https://authentik; 
    }
}

Reverse proxy of Radarr:

• /etc/nginx/sites-available/snippets/proxy-authentik-basic-auth.conf

error_page       401 = @goauthentik_proxy_signin;
auth_request_set $auth_cookie $upstream_http_set_cookie;
add_header       Set-Cookie $auth_cookie;

# translate headers from the outposts back to the actual upstream
auth_request_set $authentik_username $upstream_http_x_authentik_username;
auth_request_set $authentik_groups $upstream_http_x_authentik_groups;
auth_request_set $authentik_entitlements $upstream_http_x_authentik_entitlements;
auth_request_set $authentik_email $upstream_http_x_authentik_email;
auth_request_set $authentik_name $upstream_http_x_authentik_name;
auth_request_set $authentik_uid $upstream_http_x_authentik_uid;
proxy_set_header X-authentik-username $authentik_username;
proxy_set_header X-authentik-groups $authentik_groups;
proxy_set_header X-authentik-entitlements $authentik_entitlements;
proxy_set_header X-authentik-email $authentik_email;
proxy_set_header X-authentik-name $authentik_name;
proxy_set_header X-authentik-uid $authentik_uid;

# This section "Send HTTP Basic authentication"
auth_request_set $authentik_auth $upstream_http_authorization;
proxy_set_header Authorization $authentik_auth;

• /etc/nginx/sites-available/snippets/proxy-authentik.conf

# Special location for when the /auth endpoint returns a 401,
# redirect to the /start URL which initiates SSO
location @goauthentik_proxy_signin {
    internal;
    add_header Set-Cookie $auth_cookie;
    # For domain level, use the below error_page to redirect to your authentik server with the full redirect path
    return 302 https://auth.domain.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$request_uri;
}

• /etc/nginx/sites-available/movie.download.domain.com

map $http_upgrade $connection_upgrade_keepalive {
    default upgrade;
    ''      '';
}

server {
    listen 80;
    listen [::]:80;
    server_name movie.download.domain.com;
    
    set $upstream http://127.0.0.1:7714;
    
    proxy_buffers 8 16k;
    proxy_buffer_size 32k;

    location / {
        include /etc/nginx/snippets/proxy.conf;
        proxy_pass $upstream;

        auth_request /outpost.goauthentik.io/auth/radarr;
        include /etc/nginx/snippets/proxy-authentik-basic-auth.conf;
    }

    include /etc/nginx/snippets/proxy-authentik.conf;
}