user  nginx;
worker_processes  auto;


events {
    worker_connections  1024;
}

stream {
    map $ssl_preread_server_name $name {
        textsecure-service.whispersystems.org	signal-service;
	storage.signal.org			storage-service;
	cdn.signal.org				signal-cdn;
	cdn2.signal.org				signal-cdn2;
	api.directory.signal.org		directory;
	contentproxy.signal.org			content-proxy;
	uptime.signal.org			uptime;
	api.backup.signal.org                   backup;
        sfu.voip.signal.org                     sfu;
        updates.signal.org                      updates;
        updates2.signal.org                     updates2;
        default					deny;
    }

    upstream signal-service {
         server textsecure-service.whispersystems.org:443;
    }

    upstream storage-service {
        server storage.signal.org:443;
    }

    upstream signal-cdn {
        server cdn.signal.org:443;
    }

    upstream signal-cdn2 {
        server cdn2.signal.org:443;
    }

    upstream directory {
        server api.directory.signal.org:443;
    }

    upstream content-proxy {
        server contentproxy.signal.org:443;
    }

    upstream backup {
	server api.backup.signal.org:443;
    }

    upstream sfu {
        server sfu.voip.signal.org:443;
    }

    upstream updates {
        server updates.signal.org:443;
    }

    upstream updates2 {
        server updates2.signal.org:443;
    }

    upstream deny {
        server 127.0.0.1:9;
    }

    server {
        listen                4433;
        proxy_pass            $name;
        ssl_preread	      on;
        error_log             /dev/null;
        access_log            off;
     }
}