upstream services > oauth2-proxy > caddy

Not sure what kind of services you want to run. But I guess you want auto https etc. so probably you want to stick to caddy.

Put https://github.com/oauth2-proxy/oauth2-proxy in front of caddy.

numbers on home row, right space holds for numbers layer. nav layer has ten key on wasd block. I can see how this seems uncomfortable at first glance, but I am typing faster without having to move away from the home row.

No worries, 40s are personal preference.