Default admin password in use. You signed in with the literal change-me-in-production. Anyone who reads this repo on GitHub can do the same — rotate ADMIN_PASSWORD and API_KEY on the host and restart the service before this dashboard handles real customers.