[Freedombox-discuss] Localhost restriction AND only hidden service login

[tour / toor]

Hello all!

This is my first time posting on this listserv, so I apologize if I am 
out of format.

I was wondering how to restrict all localhost (i.e. freedombox.local, 
LAN IP, etc.) login to plinth and only enable the .onion address login 
to Plinth.

For context: we have a freedombox in our office running an xmpp and 
mumble server but we want to restrict the ability for anyone with an 
LDAP account on the LAN to login into plinth (because regular users can 
change their permissions to admin thru plinth interface!!!!).

thanks to Pierre L's "Normal user is admin" post.


-Tour-