WARNING! Don't lock yourself out using !LAN. Covers support for Linux and Webfig, including HTTPS activation with video syntax listed below:
cert
add name=LocalCA common-name=lynn91 key-usage=key-cert-sign,crl-sign
sign LocalCA
add name=Webfig common-name=lynn91
sign Webfig ca=LocalCA
/ip service
set www-ssl certificate=Webfig disabled=no
To disable https service:
/ip service
set www-ssl disabled=yes
To disable ssh service:
/ip service
set ssh disabled=yes
To disable www service:
/ip service
set www disabled=yes