BTW, it also offers authentication with PAM, password files similar to Apache's .htpasswd and by calling some external tool. And it compiles to a (currently) 176kiB binary, which has the default templates, style.css and the javascript for the crypto puzzle built in.
I use it myself on my private server to protect my package build logs (!) from hungry AI bots. WTF...