consider sslh to enable connections on port 443
multiplexing ejabberd and nginx through 443 can work, however the main drawback would be:
- no register (captcha would fail as it doesn't run on 443)
- no http upload (it doesn't run on 443 either)
we can fix both by changing the domains they run on, though. this is to be determined still.