Elasticsearch with TLS for external and HTTP for localhost?

Is it possible to make Elasticsearch for listen on HTTPS for external traffic (traffic that targets the IP of the machine) and use plain HTTP for localhost connections?

I have Kibana on the same host as Elasticsearch and I don't see the reason to use HTTPS for Kibana-->ES communication.

No you can't do that IMO.