[masonhensley]

Thanks for sharing.

Very nice:

- Secure by default (automatic https with letsencrypt, secure cookies)

- Sane defaults (No public access unless explicitly added)

Curious (not nit picking). What's the high level possibility of allowing keycloak (or another self hosted auth provider)?

Looks like you are leveraging goth... fairly simple for someone to extend down the road via a contribution, correct? https://github.com/gnur/tobab/blob/2d1fa1227d1f56ee332d3d83b...

Ref - https://github.com/markbates/goth/issues/319

[gnur]

If keycloak provides an openID connect endpoint it should be fairly trivial to extend tobab to use it.

Goth might actually have specific support for keycloak, but I'm not sure about that to be honest.