Hi,
First you need to make untrust interface manageable (let's say it's eth0/0):
set interface ethernet0/0 ip manageable
Then you can enable service you want on the interface:
set interface ethernet0/0 manage web (or "ssl" if you want https)
Here's a good article from KB how to do the same with GUI: http://kb.juniper.net/KB4718