Could even have an OAuth flow that only provides a service unique key that the service can use to call the central authority to confirm the user is 18+ and nothing else, I always thought this would be the second best solution
Yeah, if they announced 72hrs you could just leave the airport and go do somethings else. Had a 4hr delay once and I used the opportunity to leave and get something nice to eat somewhere food doesn't cost 5x more for no reason
Caddy is way easier than all the other reverse proxies, it handles certificates automatically