Avoid nginx depending on all the web-facing containers

To do so, we work around nginx's static DNS resolution of proxy upstreams by:

• making sure all proxy upstreams are set in variables
• hardcoding the DNS resolver (to the always-available internal Docker DNS resolver)

This makes nginx resolve the proxy upstreams at runtime rather than on start.