stream {
    log_format stream '$remote_addr [$time_local] host=$ssl_preread_server_name '
                      'prot=$protocol status=$status out=$bytes_sent in=$bytes_received';

    # access_log /var/log/nginx/stream_access.log stream;
    # error_log /var/log/nginx/stream_error.log;

    map $ssl_preread_server_name $backend_name {
        your.special.domain   proxy_protocol_backend;
        default               nginx_https;
    }

    upstream nginx_https {
        server 127.0.0.1:4443;
    }

    upstream proxy_protocol_backend {
        server container_backend:443;
    }

    server {
        listen 443 reuseport;
        proxy_pass $backend_name;
        ssl_preread on;
        proxy_protocol on;
    }
}