kuhli

Yes! You just have to set up your reverse proxy to send everything through it and it'll block the unauthenticated access.

The downside is that apps stop working since they don't have a way to authenticate with authelia. I've installed it as a PWA on my phone and use an old laptop with the TV interface on my TV, but it's not perfect

You can address the 2fa by putting it behind something like authelia, but still, the project needs to step it up