Regarding the restrictions of the GUI from another computer.
In the documentation I can only see the options 127.0.0.1:8384 to only allow “your self” or 0.0.0.0:8384 to allow all.
Would it work if you restrict it to 192.168.10.0:8384 to allow a full subnet or even more restriction like 192.168.10.1-20:8384 to allow for a range?