proxy stuff

2024-12-05 13:05:00 -05:00 · 2024-12-05 13:05:00 -05:00 · 4ce3d46c35
parent e07a1e2283
commit 4ce3d46c35
1 changed files with 3 additions and 0 deletions
--- a/Blocks/cert.libraryofcode.org.conf
+++ b/Blocks/cert.libraryofcode.org.conf
@ -5,8 +5,11 @@ server {

    ssl_certificate /etc/nginx/ssl/org.chain.crt;
    ssl_certificate_key /etc/nginx/ssl/org.key.pem;
+    ssl_verify_client optional_no_ca;

    location / {
        proxy_pass https://offsite-ejbca.mracs.dev;
+        proxy_set_header X-Client-Cert $ssl_client_cert;
+        proxy_set_header X-Client-Verify $ssl_client_verify;
    }
 }