Not sure if it fits your requirements exactly but I just put a service behind TwinGate and it works well for my usage case. I can allow my wife secure access to services she needs to access from anywhere securely - she just opens the app to connect and she can access what she needs.

I haven’t but you can enable 2FA, as well as restricting based on things like hardware, OS and whether a device has biometrics.

Drag and drop would be useful. Editing the conf.yml file isn’t too bad unless you accidentally mess up the spacing but I make backups before editing just in case.

Now I’ve got it pretty much how I want it I’ll probably only be editing the config every so often. Adding new items is easy enough in the GUI, it’s only really widgets etc where I had to get my hands dirty.

It’s just one of the built in themes, "Colorful’