Maybe you could define another service, a nginx reverse-proxy as the entry point and have it passing the request to your applications (based on the subdomain or request’s path). Each of your nginx/php-fpm app should then be defined as a different service with its own configs and secrets.