map $ssl_preread_server_name $name { watch.mommys.plumbing watch_mommys_plumbing; glower.agency glower_agency; wiretap.glower.agency wiretap_glower_agency; } upstream watch_mommys_plumbing { server 172.31.206.1:443; } upstream glower_agency { server 172.31.206.2:443; } upstream wiretap_glower_agency { server 172.31.206.2:443; } server { listen 443; proxy_pass $name; ssl_preread on; }