feat: optional traefik-forward-auth login

.env.sample

@@ -4,3 +4,9 @@ DOMAIN=owncast.example.com
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.owncast.example.com`'
 LETS_ENCRYPT_ENV=production
+
+COMPOSE_FILE="compose.yml"
+
+# Single Sign-On using traefik-forward-auth
+#TFA_MIDDLEWARE_NAME="keycloak"
+#COMPOSE_FILE="$COMPOSE_FILE:compose.sso.yml"

compose.sso.yml

@@ -0,0 +1,8 @@
+version: "3.8"
+services:
+  app:
+    environment:
+      - TFA_MIDDLEWARE_NAME
+    deploy:
+      labels:
+        - "traefik.http.routers.${STACK_NAME}.middlewares=${TFA_MIDDLEWARE_NAME}@file"