using ssh to forward local ports to the outside world

I have read the other issues/answers that seem similar to this, but I do not see a match. I have a VNC server running on a unix system. It is listening on 127.0.0.1. I need to be able to connect to the VNC server from an outside system whose IP is not fixed. I want to have the connection via ssh and to keep the VNC server from being seen openly (hence binding to 127.0.0.1). I am using windows 11 with putty as my VNC Client. The VNC server is on a unix system. If I start the VNC server without binding it to 127.0.0.1 (it binds to the external normal IP address) and specify a tunnel on my putty session, then it connects fine. When I bind to the 127.0.0.1 interface and attempt to connect using port 5901, I get a message saying: The connection was dropped by the server before the session could be established. My question is how do I use ssh to forward the connection from host:5901 to localhost:5901 On the sever side? OR can I configure sshd on the server to 'bridge' the unencrypted localhost:5901 to the encrypted host:5901? I am not using '-localhost' on the VNC Server. I am using '-interface 127.0.0.1'. Thanks!