Currently we are relying on a fork of the SURF Nginx component, because the latter performs some tasks not suitable on a container or in a test environment (like running letsencrypt). Ideally, SURF would incorporate the changes in the fork which conditionally disable this behavior.
