diff --git a/authentik/config/readme.txt b/authentik/config/readme.txt
new file mode 100644
index 0000000..2ee5bb0
--- /dev/null
+++ b/authentik/config/readme.txt
@@ -0,0 +1,12 @@
+modify the stupid podman socket by editing its systemctl service
+
+just do systemctl edit podman.socket and drop this in
+
+[Service]
+ExecStartPost=/usr/bin/chown {YOUR USER}:{YOUR GROUP} /run/podman
+ExecStartPost=/usr/bin/chmod 0750 /run/podman
+
+[Socket]
+SocketUser={YOUR USER}
+SocketGroup={YOUR GROUP}
+SocketMode=0660