Expose frontend but make API private and only accessible by frontend

Question

I have a different services defined under a docker compose file. Frontend, API, Redis. I also have an NGINX as my reverse proxy. I want to expose my the frontend which is a