How to run matomo internally only and not exposed to internet

General questions
1

is it possible to have matomo only accessible internally only via private ip and private dns name and not available via public dns?

currently matomo can not see traffic from users except users on that can access matomo dns name internally only

how can we achieve this so we can hide our matomor instance from attacks?

2

Hi @grepdatagrep
Do you want to track visits from users outside your organization?
Matomo tracking URL must be accessible from users being tracked… (but Matomo administration doesn’t have to)…