@rickh I have a very similar setup, also some other things like Gitea, Baby Buddy, MonicaPRM and Home Assistant.
Have you implemented SSO? I've seen a lot of options Authelia, Keycloak, Authentik. I still haven't decided.
I think I'm going to try Keycloak mostly because it looks more enterprise-ish.
I also have a guest's captive portal. I have no idea why we don't have a better way to provide one-time access. I tried to create a ghetto solution where I would create QR codes that would take users to a local page that made a POST request to the router with the credentials, but it would only work with Android devices.