Universal login hub at accounts.bqwe.com. Choose your language, sign in with Google, then return to that site — not a storefront homepage.
OAuth callback: /oauth/google/callback — enable rewrite on this vhost (see docs/oauth-hub-architecture.md).