mywiki x

This is an old revision of the document!

---

Nginx example for reverse proxy with ssl-client cert auth

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    include /etc/nginx/snippets/kc-certs.conf;
    include /etc/nginx/snippets/kc-ssl-params.conf;

    server_name example.org;
    ssl_client_certificate /etc/ssl/private/kc-ca.cert.pem;
    ssl_verify_client on;

      location / {
            proxy_pass http://127.0.0.1:8083;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $host;
         }
}