Prevent HTTP access to Etherpad-lite Admin

Hello,

we have a small security issue here:
with the current configuration of the etherpad-lite app, it is possible to access the admin area via unencrypted HTTP. Can’t this be prevented via the etherpad-lite-app.conf (or the associated join script)?

Thanks!

Kind reards, Tom

Mastodon