listen just on the internal network for http ports; listen on 8080:8084 for http-alt ports
recipe to create the developers group (and it's users) and to configure java cacerts