https://www.nginx.com/resources/admin-guide/nginx-tcp-ssl-termination/