> I tried using WordPress but it took too many custom plugins and configurations and I still got bombarded by spam signup requests

I understand the Wordpress pain. My solution was to pay Wordpress.com $35/year to give me a hosted Wordpress instance. There is just one switch you need to flip to make the whole thing private. Family members have access through their own usernames.