Just use goauthentik.io, it's awesome.