This dashboard can stay public. The Terminal can be secured behind Cloudflare Access while still working everywhere using a server-side proxy (/api/chat) to avoid CORS.
Immersive console UI · boot animation · slime pulse · optional sound
Workflows, webhooks, and automations (usually protected by Access)
Local models endpoint (API tags)
Alternate model alias (API tags)