Thanks, Jascha! Essentially I got hung up forwarding 443 from different sub domains to different services as a letsencrypt ssl redirect to different internal ports. People were saying just use caddy and nose.js. So I was trying to use the streams { function but it wasn’t quite clear how that differs from server { etc.