This closes csmith/docker-service-nginx#2

Requires that `letsencrypt-data` volume is mounted at /letsencrypt in csmith/docker-automatic-nginx-letsencrypt

Nginx lacks a strict-sni option like haproxy, so allow specifying
the default container to receive random traffic not matched by
other hosts.