Is there any way to disable 9090 or move it to localhost

hello all,

running nginx+shinyproxy, box is tightened, but unencrypted 9090 is a thorn. any way to disable (do not need monitoring) or at least restrict to 127.0.0.1?

Thank you.
Porksy