Put ZNC web interface on its on port that is inaccessible through the firewall

README.textile

@@ -191,7 +191,7 @@ Set up SPF and reverse DNS "as per this post":http://sealedabstract.com/code/nsa
 
 h3. 7. Miscellaneous Configuration
 
-* Sign in to the ZNC web interface and set things up to your liking.
+* Sign in to the ZNC web interface and set things up to your liking. It isn't exposed through the firewall, so you must first set up an SSH tunnel @ssh deploy@example.com -L 6643:localhost:6643@ and then proceed to http://localhost:6643 in your web browser.
 * Sign into ownCloud to set it up. You should select postgresql as the configuration backend.
 
 h2. How To Use Your New Personal Cloud

roles/ircbouncer/templates/var_lib_znc_configs_znc.conf.j2

@@ -24,13 +24,22 @@ Version = 1.0
 
 <Listener listener0>
 	AllowIRC = true
-	AllowWeb = true
+	AllowWeb = false
 	IPv4 = true
-	IPv6 = false
+	IPv6 = true
 	Port = 6697
 	SSL = true
 </Listener>
 
+<Listener listener1>
+	AllowIRC = false
+	AllowWeb = true
+	IPv4 = true
+	IPv6 = true
+	Port = 6643
+	SSL = false
+</Listener>
+
 <User {{ irc_nick }}>
 	Admin = true
 	Allow = *