nginx ----- Non-terminating SSL passthrough back to our K8s ingress, plus port 80 proxying for cert-manager solvers. Runs on jade.