It works

droid "test": proxy + WAF + nginx, deployed by the puller