Restricting direct access to port, but allow port forwarding in Nginx Restricting direct access to port, but allow port forwarding in Nginx elasticsearch elasticsearch