I have a setup similar to what's described in https://words.filippo.io/dispatches/age-authentication/