api and dashboard can be tightened to only be accessible by you