Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache)

Hi:

Using Proxmox 3.0 (different setup from 1.8/1.9) ... how can I accomplish this goal:

MOVE the GUI to Proxmox 3.0 from being open/available at:

https://public-ip:8006
to only being available at
https://127.0.0.1:8006

I want to require a SSH login to the box first (with cert) (done) , and then only could one get to the GUI at https://127.0.0.1:8006.

I had this done with Apache, but with pveproxy ... it is not as easy.
I could not find this documented ... any tips would be appreciated ...

Finally, is there a good book or .PDF on Proxmox (covering 1.8 through this new version 3.0)?

Thanks again in advance.