Keeps the reverse-proxy config versioned; hardcoded container IP caused 503 after every stack rebuild.