map $ssl_preread_server_name $upstream {
    dended.ddns.net ocserv_backend;
    n8n.dended.ru n8n_backend;
    default n8n_backend;
}

upstream ocserv_backend {
    server 172.17.0.1:4443;
}

upstream n8n_backend {
    server 127.0.0.1:8443;
}

server {
    listen 443;
    ssl_preread on;
    proxy_pass $upstream;
}