OpenID Connect as Client and Resource server

Another question is: Why do your run an Authorization and Client+Resource Sever on the same box?

For a simple setup it is better to implement authentication without OIDC. If you need a OIDC token for the backend, you can create one in the normal authentication flow.