OIDC and zero signups for everything. I’ve been very happy with Pomerium (ZTNA) + Keycloak for all my public facing apps, although the free version doesn’t have any client signals which I was hoping for when I starteed.

My project this week is integrating the app logging I have into Crowdsec and start having Crowdsec do more analysis.