i think nginx has an oauth_module which would allow you to use something like keycloak, if you want more than basic auth.

for apache mod_auth_openidc exists.

setting up an oauth-provider is not exactly trivial, but well documented and could be worth it if your other services offer oauth2-support or don’t feature a login at all.

for many people homelabbing is a way to gain knowledge they can use on the job.

other than that: proper single sign on across your services is nice even if you don’t expose them to anybody else.

https://github.com/Alia5/SISR

UWP games should work with this.