I recently set up Loki and added NGINX to handle TLS. I noticed Loki's poor native TLS capabilities and thought "Huh, that's annoying".
Luckily, NGINX's configuration isn't too difficult to set up and I got started by working off of the example docker-compose stack referenced in https://grafana.com/docs/loki/latest/getting-started/
It seems that authentication and network security is out of scope for Loki, which is fine so long as that's stated explicitly and documentation is clear about what you need to use along with Loki to get those features. I agree that the documentation could use some serious work. The information is there, just not as clear as it could be.
