* Single Sign-On
  * [x] Replace simpleauth with somebody else's project
  * [ ] Set up Forgejo OIDC to Authelia (there's a guide on Authelia's site)
  * [x] Persist "remember me" across reboots
* LDAP restrictions
  * [x] People can only r/w their own storage
  * [x] Public storage
  * [x] Per-Group storage
* [ ] Media-Sucker secure setup (bind to 0.0.0.0 opens to internet)