For the love of god don’t follow his ideas on consent, child sex, or bestiality.

Or eating habits

https://xkcd.com/979/

Why the downvote?

Don’t worry, there’s no deadline here. I’m not sure I got it so I’ll try to explain what I understood. You’re saying that I have to set a single IP address for the client, and allow that single address to connect to service on port 8080 on 192.168.10.1 in the firewall, right? I’m not too confident in my ability to configure the firewall, so I thought that completely isolate the subnet 192.168.2.0 and then forward a single port to it was the safe choice.

Could you elaborate what you mean with setting the allowed IPs? Yes, without tls.