Private inside, public outside

Publish one controlled public endpoint while the application remains on a private port.