user nginx; worker_processes auto; events { worker_connections 1024; } stream { map $ssl_preread_server_name $name { chat.signal.org signal-service; ud-chat.signal.org signal-service; textsecure-service.whispersystems.org signal-service; storage.signal.org storage-service; cdn.signal.org signal-cdn; cdn2.signal.org signal-cdn2; api.directory.signal.org directory; cdsi.signal.org cdsi; contentproxy.signal.org content-proxy; uptime.signal.org uptime; api.backup.signal.org backup; sfu.voip.signal.org sfu; updates.signal.org updates; updates2.signal.org updates2; default deny; } upstream signal-service { server chat.signal.org:443; } upstream storage-service { server storage.signal.org:443; } upstream signal-cdn { server cdn.signal.org:443; } upstream signal-cdn2 { server cdn2.signal.org:443; } upstream directory { server api.directory.signal.org:443; } upstream cdsi { server cdsi.signal.org:443; } upstream content-proxy { server contentproxy.signal.org:443; } upstream backup { server api.backup.signal.org:443; } upstream sfu { server sfu.voip.signal.org:443; } upstream updates { server updates.signal.org:443; } upstream updates2 { server updates2.signal.org:443; } upstream deny { server 127.0.0.1:9; } server { listen 4433; proxy_pass $name; ssl_preread on; error_log /dev/null; access_log off; } }