I’d like to do the same, but atm I use nginx to serve all the web interfaces… And keycloak support is either a plus subscription feature or made to work with hacky Lua scripts.

So for now it’s security through obscurity, I got a wildcard cert and the pages are accessed based on subdomain. So afaik nobody has a clue unless they start iterating common subdomain names. (At some point™️ I’m adding proper auth though)

In Belgium mostly the only time you’ll see anyone with the flag on some piece of clothing is at some international (sports) event.

For anyone wondering how one would go about upgrading your home install to pro, there’s MAS. It’s a simple script that will activate the windows version of your choosing, it can activate msoffice too.