Make Kibana read only for domain other than localhost

See this example, it’s perfect for your case.