add mtls endpoint

1 files changed, 10 insertions, 0 deletions

diff --git a/nginx.conf b/nginx.conf
index 10826fb..4095b7d 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -92,6 +92,16 @@ http {
 	}
 
 	server {
+		listen 51.222.150.227:444 ssl default_server;
+		listen [2607:5300:401:2c01::c0de]:444 ssl default_server;
+		server_name cgit.space;
+		ssl_certificate /etc/letsencrypt/live/cgit.space/fullchain.pem;
+		ssl_certificate_key /etc/letsencrypt/live/cgit.space/privkey.pem;
+		ssl_verify_client on;
+		ssl_trusted_certificate mtls_trusted_cert.pem;
+	}
+
+	server {
 		listen unix:/var/run/tor/cgitspace.sock;
 		server_name cgitspacea7m5fmo5stfwxkykfbrjcecevl6z3xm5u7nfppuiigqoeyd.onion;