Does CapRover's Web UI offer any kind of 2FA? It feels a bit scary to have the keys to the kingdom just hanging out in on a public IP address, for anyone to brute force the admin password.
It doesn't have 2FA, but it has password throttling, so brute force isn't possible