3

I would not recommend you open the UI to the outside directly. Use SSH port tunneling or VPN. That way you are secure and you can block failed login attempts or just to specific clients.

The reason i say that is that the UI is not HTTPS by default, you would have to configure that separately. There is also no brute force prevention.

2 Likes