Move the listener to a separate endpoint on port 80, which is only accessible from the private network. Change accounts.kosmos.org to use the new endpoint via a `.local` domain instead of faking external access.
Sets up ejabberd with vhosts for kosmos.org (public server) and 5apps.com (private server).