Web console configuration: admin.toml

The web console (roxa admin) is a separate process: an HTTP interface on top of the broker's gRPC.

# The web console address.
addr = "0.0.0.0:8080"

# The broker's gRPC address.
broker = "http://roxa:50051"

# The credentials the console uses to talk to the broker (must match [[auth.users]]
# in serve.toml if authentication is enabled).
# broker_user = "app"
# broker_password = "change-me"

# Sign-in to the console itself (the operator's login/password). Passwords are hashed
# with argon2; sessions are CSPRNG cookies with a 24 h TTL (Secure over HTTPS).
# [[users]]
# username = "admin"
# password = "change-me"

Run: roxa admin -c admin.toml (or the --addr, --broker flags).

What is inside the console: overview, live monitoring, topics (create/delete/describe), viewing and producing messages, consumer groups and lag, cluster state, component diagnostics, the license card. User management (RBAC) is available in licensed editions (see Licensing).

External access

Expose the console externally only over TLS — a reverse proxy (Caddy/Nginx) or native TLS, see TLS and security.