ok

nginx is up, TLS works.