I figured out why all of nginx's upstream requests fail; the hosts can't see each other. 😅

UpCloud support has no idea why.

As usual, if something can be broken, I'll find a way.