Nothing dynamic - this is a plain nginx container whose only job is hosting one static file, because Tesla's Fleet API partner registration requires a public key to be reachable over HTTPS at a fixed well-known path before it will issue API tokens for tesla-monitor.
GET /.well-known/appspecific/com.tesla.3p.public-key.pem
Injected via a Docker Swarm config, not baked into the image - so rotating the key is a config swap and redeploy, not a rebuild.