Containerized nginx serving HTTPS on this box. This is here to verify the reverse-proxy path (DNS → VM1 → this box) works end to end before the real deployment lands.