try to migrate to nix

nix/server/stream.nginx

@@ -0,0 +1,86 @@
+map $ssl_preread_server_name $name {
+	chat.signal.org                         signal-service;
+	ud-chat.signal.org                      signal-service;
+	storage.signal.org                      storage-service;
+	cdn.signal.org                          signal-cdn;
+	cdn2.signal.org                         signal-cdn2;
+	cdn3.signal.org                         signal-cdn3;
+	cdsi.signal.org                         cdsi;
+	contentproxy.signal.org                 content-proxy;
+	sfu.voip.signal.org                     sfu;
+	svr2.signal.org                         svr2;
+	updates.signal.org                      updates;
+	updates2.signal.org                     updates2;
+	backend1.svr3.signal.org                svr31;
+	backend2.svr3.signal.org                svr32;
+	backend3.svr3.signal.org                svr33;
+	default                                 deny;
+}
+
+upstream signal-service {
+	 server chat.signal.org:443;
+}
+
+upstream storage-service {
+	server storage.signal.org:443;
+}
+
+upstream signal-cdn {
+	server cdn.signal.org:443;
+}
+
+upstream signal-cdn2 {
+	server cdn2.signal.org:443;
+}
+
+upstream signal-cdn3 {
+	server cdn3.signal.org:443;
+}
+
+upstream cdsi {
+	server cdsi.signal.org:443;
+}
+
+upstream content-proxy {
+	server contentproxy.signal.org:443;
+}
+
+upstream sfu {
+	server sfu.voip.signal.org:443;
+}
+
+upstream svr2 {
+	server svr2.signal.org:443;
+}
+
+upstream svr31 {
+	server backend1.svr3.signal.org:443;
+}
+
+upstream svr32 {
+	server backend2.svr3.signal.org:443;
+}
+
+upstream svr33 {
+	server backend3.svr3.signal.org:443;
+}
+
+upstream updates {
+	server updates.signal.org:443;
+}
+
+upstream updates2 {
+	server updates2.signal.org:443;
+}
+
+upstream deny {
+	server 127.0.0.1:9;
+}
+
+server {
+	listen                443;
+	proxy_pass            $name;
+	ssl_preread           on;
+	error_log             /dev/null;
+	access_log            off;
+}