{{ ansible_managed | comment }}

map $ssl_preread_server_name $name_from_front {
    default         self;
}
upstream self {
    server 127.0.0.1:8443;
}
server {
    listen 172.20.198.2:443;
    proxy_pass $name_from_front;
    ssl_preread on;
 }