If you are reading this over HTTPS with a valid certificate, the vhost, the wildcard cert and PHP-FPM routing are all wired correctly on herringadmin (18.130.53.86).
herringadmin
Check the X-latest-site response header to confirm which machine answered.
X-latest-site
PHP check