Linux PAM
There is also a Linux PAM host login (demo video, then kiela-login / pam_kiela sources). Pedagogy only — no public PAM shell.
Every starter uses the same layout: .env (APP_ORIGIN),
lib/embed-url.*, lib/auth.*,
service.*, and the same public/ tree. Register the app URL in the Console
so it matches this site’s public origin.