Connection refused when promoting

$ cx start                                                                                                                                                          
build   | building: /Users/mateuszfiolka/Projects/smp/dwaxis
build   | uploading: OK
build   | starting build: 84218e9be06d693cf2075adc0c2ce565587189e62d384f32bc284be7b4bd7f46
build   | preparing source
build   | building: .
build   | running: docker build -t 9836064b94124bad54f83c70026dd85fcb8b5a13 /tmp/914427585
build   | Sending build context to Docker daemon  19.72MB
build   | Step 1/5 : FROM openjdk:8
build   |  ---> 4551430cfe80
build   | Step 2/5 : RUN mkdir -p /usr/src/app/etc
build   |  ---> Using cache
build   |  ---> e48babaabcdd
build   | Step 3/5 : COPY etc/settings.yml /usr/src/app/etc
build   |  ---> Using cache
build   |  ---> 57c7f4acef55
build   | Step 4/5 : COPY target/dwaxis.jar /usr/src/app
build   |  ---> Using cache
build   |  ---> 83092d37c6ad
build   | Step 5/5 : WORKDIR /usr/src/app
build   |  ---> Using cache
build   |  ---> 65ccf72b4ec5
build   | Successfully built 65ccf72b4ec5
build   | Successfully tagged 9836064b94124bad54f83c70026dd85fcb8b5a13:latest
build   | running: docker tag 9836064b94124bad54f83c70026dd85fcb8b5a13 convox/dwaxis/web:BZOQDVDKVZ
build   | storing artifacts
build   | build complete
convox  | promoting RXVQTGQWJZ
Post https://10.42.0.0/endpoints/web.dwaxis.convox: dial tcp 10.42.0.0:443: getsockopt: connection refused

convox.yml

version: '2'
services:
  web:
    certificate: ${HOST}
    port: 80
    command: java -jar -Ddw.server.connector.type=http dwaxis.jar server etc/settings.yml
    environment:
      - DO_NOT_FORCE_HTTPS=oink
    scale: 2

Dockerfile

FROM openjdk:8
RUN mkdir -p /usr/src/app/etc
COPY etc/settings.yml /usr/src/app/etc
COPY target/dwaxis.jar /usr/src/app
WORKDIR /usr/src/app

The apps are running I can cx exec $CONTAINER_ID bash them, then curl the local 80 port and in logs I see correct requests.

I can't access the apps from the host, as they have no port mapping (mapping and ip checked via docker inspect). I guess it's intended so that only local load balancer has access. However the load balancer is either not running or the access is broken.

Some more context:

$ cx apps                                                                                                                                                           
NAME             STATUS
dwaxis           running
test-1503395896  running
test-1503397690  running

$ cx services
NAME  ENDPOINT
web   https://web.dwaxis.convox

$ cx rack                                                                                                                                                           
Name     convox
Status   running
Version  20170816100405

$ sw_vers                                                                                                                                                           
ProductName:    Mac OS X
ProductVersion: 10.12.6
BuildVersion:   16G29

convox / praxis

Connection refused when promoting #340