The Ansible playbooks I use to deploy it are the documentation.

In my homelab I use Bitnami’s sealed secrets to commit the encrypted secrets to git and deploy with ArgoCD.

Which user do you use to run the podman command? Confirm with whoami

Note that the sysctl net.ipv4.ip_unprivileged_port_start can be used to allow non-root users to bind to ports <1024, this might be configured in MicroOS, I don’t know.

I run some containers based on Fedora, mainly because I know the userspace and I don’t care about the size.

I use fail2ban to ban IPs that fall to login and also IPs that perform common scans in the reverse proxy

On the other hand I value Authelia single configuration file which I can version control in git. Authentik is a click-ops burden.