Its a pre-authentication gateway and SSO provider for OAuth/SAML. So if you dont trust a random docker container to be secure it requires you to authenticate and then it automatically passes a token to the app for SSO if it supports OAuth/SAML.
Intel tried to make Itanium which was incompatible with x86 in order to become a monopoly, but AMD extended x86 with x64. AMD won in the end due to adoption, their first chip was the original Athlon64, which came shortly after the pentium 4 and the ghz wars.
I've just had a lot more success using Caddy when it comes to things that require mod rewrites and stuff on Nginx. I dont know what they've done differently on the back end but the compatibility with random types of web server software seems to play nicer. Also theres Certbot integration built in which is nice.
What I did is Reolink with PoE off Amazon for about 100$, with RTSP so it can be absorbed into Home Assistant. Block its mac address for internet access in your router.
Europe breaks their own procurement laws to choose Windows, because they are idiots.