feat: mTLS with nginx and python

frappe · Sep 18, 2024 · c6c175d · c6c175d
1 parent bb2e324
commit c6c175d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/bench/config/templates/nginx.conf b/bench/config/templates/nginx.conf
@@ -48,6 +48,7 @@ server {
 	ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
 	ssl_ecdh_curve secp384r1;
 	ssl_prefer_server_ciphers on;
+	ssl_verify_client optional_no_ca;
 	{% endif %}
 
 	add_header X-Frame-Options "SAMEORIGIN";
@@ -98,6 +99,7 @@ server {
 		proxy_set_header X-Frappe-Site-Name {{ site_name }};
 		proxy_set_header Host $host;
 		proxy_set_header X-Use-X-Accel-Redirect True;
+		proxy_set_header SSL_CLIENT_CERT $ssl_client_cert;
 		proxy_read_timeout {{ http_timeout or 120 }};
 		proxy_redirect off;