Regarding the task of seperateing luci from firewall, I found
will give it a try...
obviosly, it's not that simple - so give it an own thread: