Force secure access remotely, but allow insecure connection locally

I asked the same question a couple of weeks back and the only solution I found was using Tautulli to kill remotely unencrypted connections

https://forums.plex.tv/t/enforce-secure-connection-for-remote-users-only/