Centralized Auth for Internal Tools with Caddy and Azure AD

A developer describes using Caddy as a reverse proxy with the caddy-security plugin to add OAuth2 authentication against Azure AD for internal tools. The setup eliminates per-tool user databases and password resets, requiring only two config lines per new service. Caddy's automatic HTTPS and plugin system simplify deployment, with pre-built binaries available to avoid Go compilation.