Saving a host sent advanced_config as an empty string and reset http2, both HSTS flags, meta, locations and enabled — so changing a port removed the auth_request block that puts Authelia in front of the site. Twenty-five of the thirty-five hosts here carry one.