I'm not going to repeat what I said (too much) - SECURE NODE RED!!!.
You have been warned, if you do not - you WILL BE a victim of open Node RED instances being hacked
But in answer to your question, setup SSL on Node RED
To answer any questions about security/SSL : see here & here
Nothing further... your honor