This fixes a startup error with the "certs" role: upon restart, the
"certs" supervisord service tries to contact the service through the
public port (which should be) served by NginX and fails.