RPP-BMA WireGuard endpoint hostname. UDP 51820 is reserved for panel VPN; Docker cloud WG client stays stopped.