Each developer gets a stable HTTPS URL on your domain (foo.dev.example.com) pointing at his laptop while his tunnel is up — without paying for ngrok reserved domains or handing everyone a random *.ngrok-free.* URL.
Browser → https://foo.dev.example.com
nginx (TLS, shared host)
proxy → 127.0.0.1:5001 (foo's port on server)
SSH reverse tunnel
→ 127.0.0.1:8080 (foo's laptop)