In this post I have found the next settings:
duplicati-server --webservice-interface=any --webservice-port=8200 --webservice-allowed-hostnames=*
It works now.
But in my case, I am on AWS EC2, so I decided to go with Nginx reverse proxy (https). It woks even with the Duplicati web service bound to the localhost. (ssh tunnel works too).