Fix public topology/routing diagram generation and layout

scripts/docs/sanitize-public-docs.py

@@ -10,7 +10,7 @@ out_dir.mkdir(parents=True, exist_ok=True)
 
 
 def sanitize_text(content: str) -> str:
-    content = re.sub(r'\b[a-zA-Z0-9.-]+\.lan\.ddnsgeek\.com\b', '<internal-domain>', content)
+    content = re.sub(r'\b([a-zA-Z0-9-]+)\.lan\.ddnsgeek\.com\b', r'\1.<domain>', content)
     content = re.sub(
         r'\b(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3})\b',
         '<private-ip>',
@@ -63,7 +63,9 @@ This documentation is generated from the infrastructure repository. Sensitive va
 
 This view groups containers by inferred host and service role (edge/proxy/auth, monitoring, automation, apps, and supporting storage/services).
 
-![Physical topology](physical-topology.svg)
+<div class="diagram-wrap">
+  <img src="physical-topology.svg" alt="Physical topology">
+</div>
 
 ## Docker, Traefik and Dynu routing
 
@@ -71,6 +73,8 @@ This view shows sanitised public DNS names flowing to Traefik, then to exposed D
 
 _Diagrams are generated from Compose data and Traefik labels._
 
-![Docker Traefik Dynu](docker-traefik-dynu.svg)
+<div class="diagram-wrap">
+  <img src="docker-traefik-dynu.svg" alt="Docker Traefik Dynu">
+</div>
 """
 )