Thanks for sharing.
Very nice:
- Secure by default (automatic https with letsencrypt, secure cookies)
- Sane defaults (No public access unless explicitly added)
Curious (not nit picking). What's the high level possibility of allowing keycloak (or another self hosted auth provider)?
Looks like you are leveraging goth... fairly simple for someone to extend down the road via a contribution, correct? https://github.com/gnur/tobab/blob/2d1fa1227d1f56ee332d3d83b...