Authentik
Identity provider, OIDC flows, group model.
Networking
Cloudflare tunnels, Zero Trust, PCT layout, DNS.