I’ve used it for some time, it’s overall good, but it has some issues:
- Users privilege can be tricky sometimes, in some cases I wanted to give admin access to some users to some specific apps installed, it didn’t work.
- Customization wasn’t that straightforward, and even if you go extra mile and change things manually, next update you will have the default ugly logos and favicon.
- Didn’t try it long enough to check the security, but the admin user was that time still uses a password instead of a key pair like my AWS, and didn’t see any 2FA for the admin panel, unlike others like webmin.
So it’s overall great for home use but wouldn’t recommend for any enterprise use.
I think it is worth revisiting as it has greatly improved since maybe you last used it. Within the admin panel I switched to use key pair and changed my SSH port. There is still no MFA on main admin panel, but many of the apps such as Nextcloud and Mastodon have it. Fail2ban is included and mitigates brute force attempts.
