by default there's a localhost VirtualHost which is used for single system deploys. It would be neat to be able to get rid of this. We could for example create an internal.vpn.example.org vhost with self-signed certificates that expire after 10 years. When switching to multi node, the same internal name can be used although we probably then have to create /etc/hosts entries, which is not the worst. Better to not depend on (public) DNS anyway for internal communication...