chore(iot): Restrict to local and VPN traffic

This patch restricts access from the internet to IoT devices. It's now
limited to the local network and VPN access, which reduces the risk of
an attack and improves the multi-layer security.