Create vhost for bare metal provisioning

We should create an internal vhost to stick the files used for bare-metal provisioning (e.g. preseeding configs).

• http-only (so it can be used in ipxe and early d-i without worrying about certificates)
• IP-restricted to machines known to be needing a setup (or at least to internal networks, for now)