nginx-satisfy-any-remoteaddr-clientcert

nginx-satisfy-any-remoteaddr-clientcert

# satisfy any like funkcionality in nginx
# with client certificat or remote address
#
# based on https://sys-notes.com/bin/view/Main/NginxSSLClientAuth
#

#if ($ssl_client_s_dn !~ "(O=My Company)") {
#       return 403;
#}
set $accessok "";
if ($remote_addr ~ "123.456.789.123") {
        set $etnok "${accessok}ok";
}
if ($ssl_client_s_dn ~ "(O=My Company)") {
        set $etnok "${accessok}ok";
}
if ($accessok !~ "ok") {
       return 403;
}