apps/web/src/App.tsx

@@ -249,14 +249,14 @@ export function App() {
     return <Navigate to="/login" replace />;
   }
 
-  // Production: need setup check
+  // Show login BEFORE checking needsSetup (needsSetup is never set for unauthenticated users)
-  if (needsSetup === null) return null;
-
-  // Production mode: if no session, redirect to Authentik sign-in
   if (!authDisabled && !session) {
     return <LoginPage />;
   }
 
+  // Production: need setup check
+  if (needsSetup === null) return null;
+
   // Redirect to setup wizard if needed
   if (needsSetup) {
     return <Navigate to="/setup" replace />;