stream {
  log_format main
            '$ssl_preread_server_name > $remote_addr [$time_local] ';

  {% if nginx_stream_access_log is defined %}
  access_log {{ nginx_stream_access_log}} main;
  {% endif %}

  map_hash_bucket_size 48;

  map $ssl_preread_server_name $targetSslBackend {

      default            {{ nginx_stream_default_endpoint}};
  }

  server {
    listen 443;

    proxy_connect_timeout 1s;
    {% if nginx_resolvers is defined %}
    resolver {% for r in nginx_resolvers %}{% if ":" in r %}[{{ r }}]{% else %}{{ r }}{% endif %} {% endfor %};
    {% endif %}

    proxy_pass $targetSslBackend;
    {% if no_proxy_protocol is not defined %}
    proxy_protocol on;
    {% endif %}
    ssl_preread on;
  }
}