community.spirit-project.com uses passwords to log in, but runs on http, which means, that passwords travel in plain text. This forum should run on https. Now with Lets Encrypt it is easy to set up.
I'll get to it ASAP.
I did that several times, so maybe this configuration might be useful to you, to use as example: