Administrative access requires a password and a TOTP code from your authenticator.

The panel is served over HTTPS by the reverse proxy; the container port itself is bound to 127.0.0.1 only.