I could set up basic authentication using Nginx Proxy Manager, but that adds some workload for me when people forget their passwords.

Authentication with 3rd party services is behind their paywall. I have very little experience setting up such things, so I’m not sure if there’s some sort of work around.

There is a bit of functionality built in already that requires users to log in, but that’s going to be a v1.1 feature, if a feature at all. I looked at it briefly and it didn’t make sense to me, so it’ll require some more digging.