If you don’t want to expose endpoints over HTTP you can set the management port to -1:
-1
management.port=-1