awx_web bypasses firewalld

Currently I have AWX set up so that it’s listening on port 80 on the host, which is subsequently forwarded to 8052 on the container. To enable SSL, I have set up nginx on the host to reverse proxy. This works great!

However, due to the nature of docker/iptables even though port 80 is blocked in firewalld - it’s still open, which is undesirable.

What is the easiest way for me to blow port 80 on the host - i.e. bind docker to 127.0.0.1/80 instead of 0.0.0.0/80 ?