DNS + TLS + reverse proxy are working.
Next: replace placeholder web/api containers with real images.