Trek stack — use /auth for Keycloak, /api for the API.