- Add pocket-id service with nginx reverse proxy - Domain: auth.baduhai.dev - Uses SQLite database - Generate encryption key stored in age secrets