How To Configure NGINX for switching TLS certs by domain name for HNS + ICANN dual name support.

nginx.conf

server {
 server_name starservice *.starservice;

 listen 80;
 listen [::]:80;
 listen 443 ssl;
 listen [::]:443 ssl;

 ssl_certificate /root/ssl/starservice/cert.crt; 
 ssl_certificate_key /root/ssl/starservice/cert.key;

 root /root/www/starservice;
 
 index index.html;
 try_files $uri $uri/ $uri.html =404;
}

server {
 server_name starservice.space *.starservice.space;

 listen 80;
 listen [::]:80;
 listen 443 ssl;
 listen [::]:443 ssl;

 ssl_certificate /etc/letsencrypt/live/starservice.space/fullchain.pem; 
 ssl_certificate_key /etc/letsencrypt/live/starservice.space/privkey.pem;

 root /root/www/starservice;
 
 index index.html;
 try_files $uri $uri/ $uri.html =404;
}

Credit to @pinheadmz for this content, he asked me to gist and link to it so that he doesn't have to do it himself.