Admin panel
Owners and admins see a Server admin tab in Settings. The panel is optional: everything it does can also be done by editing config.toml.
Who sees it
Section titled “Who sees it”| Role | How you get it | Can do |
|---|---|---|
| Owner | First account on a fresh server, or admin.owner_username recovery |
Everything below, plus manage admins, backups, reset, delete and transfer ownership |
| Admin | Granted by the owner | Overview, registration mode, invites, non-sensitive settings, audit log |
| Everyone else | Nothing. Every /api/admin/* route returns 403 |
Roles are checked on the server on every request. Revoking an admin takes effect immediately.
What it can do
Section titled “What it can do”- Registration: switch between open, invite-only and closed, and create invitation codes.
- Settings: edit a whitelist of
config.tomlkeys. Comments in the file are preserved and a.bakof the previous file is kept. Secrets are never shown. Network and session-security keys are owner-only. - Audit log: recent admin actions.
- Owner tools: download an encrypted backup, reset data (keeps the owner account), delete the server, add or remove admins. Each asks for the owner’s password again; reset and delete also require typing a confirmation.
Recovering a lost owner login
Section titled “Recovering a lost owner login”Set admin.owner_username = "name" in config.toml and restart. See Backups and restore.