HTTPS reverse-proxy for portal, api, leaf, zap, staff, iam, login, cs, sales, acct, mw, and fleet. Staff HTML login redirects use X-Forwarded-Proto so next= is https on the public host.
Document machine DNS (NS1.GEORGELAMBERT.ORG) and suggested *.zapier.georgelambert.org names for public doors versus loopback workers.
