server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name offsite-ejbca.mracs.dev;

    location / {
        allow 63.141.252.133;
        deny all;
        proxy_pass https://localhost:7563;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Client-Cert $http_x_client_cert;
        proxy_set_header X-Client-Verify $http_x_client_verify;
    }

}