That’s really up to the software again. If you’re not technically inclined enough to run through the code, that’s fine, but you have to trust that other people are.
Go and search GitHub issues or this project by name for what you’re concerned about.
Authentication is also not security, btw. It’s just access. If you can be more specific about your concerns in your post, you may get more direct answers.
Tunnels are not authentication.
Are you asking how to have each service challenge for authentication? That’s up to the software.
Static site hosted by someone else for free is the way to go. I wouldn’t invite that sort of pain upon my network.
It’s a systemd-style way to manage podman containers that aims to be as easy to manage as compose/swarm. Not quite an integration, but operates similarly, and about as easy to read. Less heavy than managing a local micro-k8s cluster. That’s about it.
Minidisc