If you really want to use a broker built into node red (which I advise against) then you only need one node-red instance. The server node is completely separate from the client nodes.
If you install mosquitto then in order to allow access from external devices (such as the ESP) then you need to edit the mosquitto configuration file and add to the end
listener 1883
allow_anonymous true
Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.
The OpenJS Foundation | Terms of Use | Privacy Policy | OpenJS Foundation Bylaws | Trademark Policy | Trademark List | Cookie Policy