Hello,
I was able to successfully create multiple client after starting server on VPS, my question is aside me, who has access to my self host, and can tamper with it aside me?
Sorry, I missed this post. boringproxy is designed for hosting public services, so anyone can access your services. However, most services include login pages that only you will have accounts on. Whether this is sufficient security or not is up to you. Generally speaking, having any access into your local network introduces risk, and I wouldn’t recommend it unless you understand that risk pretty well.
As for boringproxy itself, no one should be able to access the admin page without a token. If so that’s a bug.