It’s normal to run Discourse on a subdomain - if you’re running on the domain itself, you have to be using one of a small number of DNS providers which support that:
I don’t know what the failure mode is, if this is the problem.
What makes you say this? From the ps command, the nginx is inside the container, although it’s not quite the same as mine.