Elasticsearch Internal URl

I am hosting Elasticsearch internally on a VM. I want to allow others to login to Kibana. What is the correct setting?

Are there changes required to kibana.yml, elasticsearch.yml or both?