    ssl_client_certificate /etc/nginx/certs/ca.crt;
    ssl_verify_client optional;
