BMS Legacy prototype: nginx + TLS configured. App not yet deployed.