Dmitri Toubelis dtoubelis

dtoubelis / gist:562108c860df32f9b8cc

Last active August 29, 2015 14:27

nginx configuration for client certificate authentication

	server {
	listen 443 ssl;
	listen [::]:443 ssl;

	server_name api.example.com;

	ssl_dhparam /etc/nginx/ssl/dhparam.pem;
	ssl_certificate /etc/nginx/ssl/server-chain.crt;
	ssl_certificate_key /etc/nginx/ssl/server.key;

dtoubelis / gist:2e0813103ec089d6d9f1

Created August 20, 2015 16:58

nginx default server for ssl/tls

	server {
	listen 443 ssl default_server;
	listen [::]:443 ssl default_server ipv6only=on;
	return 403;
	}