From e18068e73a5a3b785dcffabf2a2d77d2e2a4e4cf Mon Sep 17 00:00:00 2001
From: steering7253
Date: Sun, 7 Jun 2026 15:42:40 -0600
Subject: add mtls endpoint

---
 nginx.conf | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/nginx.conf b/nginx.conf
index 10826fb..4095b7d 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -91,6 +91,16 @@ http {
 		include server.conf;
 	}
 
+	server {
+		listen 51.222.150.227:444 ssl default_server;
+		listen [2607:5300:401:2c01::c0de]:444 ssl default_server;
+		server_name cgit.space;
+		ssl_certificate /etc/letsencrypt/live/cgit.space/fullchain.pem;
+		ssl_certificate_key /etc/letsencrypt/live/cgit.space/privkey.pem;
+		ssl_verify_client on;
+		ssl_trusted_certificate mtls_trusted_cert.pem;
+	}
+
 	server {
 		listen unix:/var/run/tor/cgitspace.sock;
 		server_name cgitspacea7m5fmo5stfwxkykfbrjcecevl6z3xm5u7nfppuiigqoeyd.onion;
-- 
cgit v1.3.1-10-gc9f91