Block a user
Replace Authelia with NGINX-native Keycloak integration
Protect unprotected services
Currently Keycloak and Portainer are protected when not on local network.