Restrict Plinth to be accessed locally only

Actually, the “Webserver Home page” drop-down box lists

Apache Default
Freedombox service (Plinth)
Cockpit

…and then some of the apps you have installed. For instance, if you have a mail server and Roundcube, you also get “My Email Aliases” and “Roundcube” as options.

If this dropdown box were made into an editable GUI table, it would fix my problem, and expose some of the functionality I mentioned earlier. Like this:

Service Published at Who can see it
Apache Default (HTML) www.example.com allow all
Freedombox service (Plinth) www.example.com/plinth allow localhost only
Cockpit (server manager) www.example.com/_cockpit allow localhost only
My Email Aliases www.example.com/email/aliases allow all
Roundcube (webmail) www.example.com/email allow all

Or allow by hostname or IP address. More columns could be added for more functionality (suggestions?).

This would also communicate more clearly what the setting is, especially if the URLs in the second column were links. Some users currently overlook the “Webserver Home page” setting (it took me a search to find it):