map $ssl_preread_server_name $sni_backend {
    t.1633292.cn   127.0.0.1:8443;
    git.1633292.cn 127.0.0.1:8444;
    default        127.0.0.1:7443;
}

server {
    listen 443;
    listen [::]:443;
    proxy_pass $sni_backend;
    ssl_preread on;
    proxy_connect_timeout 5s;
    proxy_timeout 1h;
}