I would think about adding a virtual host-based proxy. That way users could provide you with their domain(s), and you could forward traffic on port 80/443 for that host to the appropriate vm.