I scratched my head for a minute at why, but after I thought about it, I can see some possibilities So I think the answer to your question is going to be a copious user of installer options during capsule and satellite installation

# satellite-installer --scenario satellite --help |egrep -i 'listen|interface'
    --capsule-qpid-router-agent-addr  Listener address for goferd agents (default: "0.0.0.0")
    --capsule-qpid-router-agent-port  Listener port for goferd agents (default: "5647")
    --capsule-reverse-proxy-port  reverse proxy listening port (default: "8443")
    --foreman-passenger-interface  Defines which network interface passenger should listen on, undef means all interfaces (default: nil)
    --foreman-proxy-bmc-listen-on  BMC proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-dhcp-interface  DHCP listen interface (default: "eth0")
    --foreman-proxy-dhcp-listen-on  DHCP proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-dns-interface  DNS interface (default: "eth0")
    --foreman-proxy-dns-listen-on  DNS proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-http-port     HTTP port to listen on (if http is enabled) (default: 8000)
    --foreman-proxy-logs-listen-on  Logs proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-port          Port to listen on (deprecated in favor of $ssl_port and $http_port) (default: nil)
    --foreman-proxy-puppetca-listen-on  Puppet CA feature to listen on https, http, or both (default: "https")
    --foreman-proxy-puppetrun-listen-on  Puppet run proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-realm-listen-on  Realm proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-ssl-port      HTTPS port to listen on (if ssl is enabled) (default: 9090)
    --foreman-proxy-templates-listen-on  Templates proxy to listen on https, http, or both (default: "both")
    --foreman-proxy-tftp-listen-on  TFTP proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-plugin-openscap-listen-on  Proxy feature listens on http, https, or both (default: "https")
    --foreman-proxy-plugin-pulp-listen-on  Proxy feature listens on http, https, or both (default: "https")
    --foreman-proxy-plugin-remote-execution-ssh-listen-on  Proxy feature listens on https, http, or both (default: "https")

# satellite-installer --scenario capsule --help |egrep -i 'listen|interface'
    --capsule-qpid-router-agent-addr  Listener address for goferd agents (default: "0.0.0.0")
    --capsule-qpid-router-agent-port  Listener port for goferd agents (default: "5647")
    --capsule-reverse-proxy-port  reverse proxy listening port (default: "8443")
    --foreman-proxy-bmc-listen-on  BMC proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-dhcp-interface  DHCP listen interface (default: "eth0")
    --foreman-proxy-dhcp-listen-on  DHCP proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-dns-interface  DNS interface (default: "eth0")
    --foreman-proxy-dns-listen-on  DNS proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-http-port     HTTP port to listen on (if http is enabled) (default: 8000)
    --foreman-proxy-logs-listen-on  Logs proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-port          Port to listen on (deprecated in favor of $ssl_port and $http_port) (default: nil)
    --foreman-proxy-puppetca-listen-on  Puppet CA feature to listen on https, http, or both (default: "https")
    --foreman-proxy-puppetrun-listen-on  Puppet run proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-realm-listen-on  Realm proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-ssl-port      HTTPS port to listen on (if ssl is enabled) (default: 9090)
    --foreman-proxy-templates-listen-on  Templates proxy to listen on https, http, or both (default: "both")
    --foreman-proxy-tftp-listen-on  TFTP proxy to listen on https, http, or both (default: "https")
    --foreman-proxy-plugin-openscap-listen-on  Proxy feature listens on http, https, or both (default: "https")
    --foreman-proxy-plugin-pulp-listen-on  Proxy feature listens on http, https, or both (default: "https")
    --foreman-proxy-plugin-remote-execution-ssh-listen-on  Proxy feature listens on https, http, or both (default: "https")

This may or may not cover all the possibilities, but it would get you going down the road.