anyone have suggestions on how to lock down nrepl server on an app?

Lock down in which sense?

If you just don’t want to allow outside connections it’s usually best to tunnel the connection via ssh.