server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name cert.libraryofcode.org; ssl_certificate /etc/nginx/ssl/org.chain.crt; ssl_certificate_key /etc/nginx/ssl/org.key.pem; ssl_verify_client optional_no_ca; location / { proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_set_header X-Client-Verify $ssl_client_verify; proxy_set_header X-Client-DN $ssl_client_s_dn; proxy_set_header X-Client-Serial $ssl_client_serial; } }