[Task]: Task 7 — Optional: Admin UI toggle for bind mode (guardrails, not magic)

[devils-shadow]

Problem

You floated “maybe a UI component”. It’s useful, but only if it doesn’t become a foot-gun.

Goal

Allow switching bind host/port from admin UI, but keep it safe and explicit.

Proposed change

• Add an admin-only “Networking” section:
  • Shows current bind host/port (read from /etc/quail/config.env or environment).
  • Allows changing bind host between 127.0.0.1 and 0.0.0.0 (dropdown).
  • Applies change by editing config file + systemctl restart quail.
• Require Admin PIN (if Quail already has one) before applying.

Acceptance criteria

• Change persists across reboot.
• UI clearly warns about exposure when using 0.0.0.0.

Test plan

• Toggle to 0.0.0.0, verify listening address changes after restart.
• Toggle back, verify.