nginx의 여러 가상 호스트 HTTPS

Question

단일 Nginx 인스턴스에서 HTTPS를 통해 여러 개의 가상 호스트(사이트/응용 프로그램)를 가질 수 있습니까?

나는 다음과 같은 것을 시도했다

upstream a {
  server app:8080;
}


upstream b {
  server app2:5678;
}

server {
  listen 443 ssl http2;
  server_name sub.example.com;

  ssl_certificate       /etc/ssl/certs/fullchain.pem;
  ssl_certificate_key   /etc/ssl/certs/privkey.pem;
  ssl_dhparam           /etc/ssl/certs/dhparam-2048.pem;
  
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
  ssl_prefer_server_ciphers off;

  ssl_stapling on;
  ssl_stapling_verify on;
  resolver 8.8.8.8;

  location / {
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
    
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header Host $http_host;
    proxy_redirect off;
    proxy_pass http://unicorn;
}

server {
  listen 5678 ssl http2;
  server_name sub.example.com;

  ssl_certificate       /etc/ssl/certs/fullchain.pem;
  ssl_certificate_key   /etc/ssl/certs/privkey.pem;
  ssl_dhparam           /etc/ssl/certs/dhparam-2048.pem;
  
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
  ssl_prefer_server_ciphers off;

  ssl_stapling on;
  ssl_stapling_verify on;
  resolver 8.8.8.8;

  location / {
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
    
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header Host $http_host;
    proxy_redirect off;
    proxy_pass http://unicorn2;
}
}

'a' 앱에 액세스할 수 있습니다. 그러나 'b' 앱은 그렇지 않습니다. 나는 Error code: SSL_ERROR_RX_RECORD_TOO_LONG.

두 앱은 동일한 하위 도메인에서 실행되어야 합니다.