Good stuff, @Erik Andersen - Hoping I can get it set up just as easily. The credentialing part is the only thing that gives me pause. If I understand it correctly (and I may not) the weakest link here is the 3rd party authentication; git, google etc. So, if I provide access and a user has a weak PW, that's greatest threat vector. I need to RTFM a bit more, but so far, that is where my attention will be focused on users not on my physical LAN.