**Motivations:**
- DEPLOY_SSH_PROXY_HOST= was overridden by default bastion due to ${VAR:-default}.
**Root causes:**
- Bash treats empty VAR as unset for :- expansion, reapplying 4nk.myftp.biz.
**Correctifs:**
- Use -v / empty check: unset bastion when explicitly empty; default only when unset.
**Evolutions:**
- README and failure hint for LAN direct deploy.
**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md