The admin panel is the web page you're using right now to manage rust-proxy — the Hosts, ACLs, Firewall / port rules, Certificates, and other tabs. This page covers who can reach it and how to control that.
By default, the admin panel listens on port 8084 and is reachable from anywhere on your network (e.g. http://your-server:8084/). This is deliberate: it means a brand-new install is immediately usable for the setup wizard, without having to edit any files first.
Reaching the admin panel is separate from having an account — even if someone can load the page, they still need valid login credentials (or to be the very first visitor completing the setup wizard on a never-configured install) to actually do anything.
Once you're set up, you may want to restrict which networks can reach the admin panel's address at all, as an extra layer on top of the login requirement. This is a config-file setting (admin.allowed_ips), not something in the web UI itself — ask whoever manages the server to set it if you want this.
For a stricter setup, you can turn off network access to the admin panel altogether — it becomes reachable only from the server itself (for example, by connecting to the server directly and using a secure tunnel), never from the open network at all.
Once saved, the change takes effect on the next firewall sync — normally within moments.
Be careful with this one. If you turn this off without another way to reach the server (like SSH access), you could lock yourself out of the admin panel until you can get onto the server directly to turn it back on. This setting exists for people who already manage their server through a secure connection (like SSH) and want the admin panel to never be reachable any other way.
If this toggle is greyed out, it means whoever manages the server has already set it directly in the configuration file, which always takes priority — ask them to change it there instead.
Created once, during the initial setup wizard (see Getting Started). There's currently no in-panel way to change your password after that — this is managed by whoever administers the server directly.