Enable SSL termination on staging, too.
Staging's server_name also needs to match the cert.