Expose Juju services running inside containers with NAT