Open the port for the web frontend.
Try using roles to handle the service being unconfigured.