How to change bind lan inteface for web gui?

Hi! I have FreePBX Distro 2.11 installed. Can I make web gui accessable only from tun (OpenVPN) inteface and unaccessable from eth0 interface? Is there any configs in freePBX itself for this purpose or I have to use firewall and httpd.conf?