I ditched for [silverbullet](https://silverbullet.md). MIT licensed, markdown editor with embedded lua scripting. It's a PWA app that works offline and syncs well.
Other than that it's exactly what it says on the tin, a hacker's digital notebook. While it would take a bit of rolling up your sleeves to make it look as nice as Logseq or Obsidian it's actually closer in form and function to something like org-mode for Emacs (though not quite hitting the mark regarding linking sadly).
I'm also having issues with integrating it with Authentik's header proxy auth, keeps directing me to a note with the outpost path as the name. The only guide is for authelia.
I haven't tried putting it behind Authentik or Authelia. They make it known in the Authelia guide what it is they care about being always exposed, vs password protected. Hopefully you get it figured out and you can update the docs so the next person doesn't have the same headache!
I just put it behind a <uuid>.mydomain.com with a domain TLS cert and use the built-in auth.
The wildcard TLS cert keeps the <uuid> from being public in the cert log. The only way you know the URL is if you have access to my DNS queries or have a MITM setup. Plus you still have to know my password.
Good Enough for me.
If I cared a bit more I'd put it behind Tailscale/Nebula/etc instead of having it publicly accessible. Maybe next time I'm bored I'll do that.