I don’t see the problem here, just have reasonable defaults. (e.g. port 80,443, perhaps deny private networks by default)