nginx on app1 (10.159.0.11), TLS terminated here, reached through the HAProxy SNI passthrough on 31.14.40.48.