Operator access
One password, over HTTPS, for a while.
This panel makes and stops API tokens, so it lets one person in, and not for long.
- No accounts: one operator, one password hash in the server's settings.
- 10 wrong passwords an hour from one address, then a wait.
- A session ends after 60 minutes idle, and after 12 hours at most.