Nginx 反向代理使用双向认证

location /api {
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_redirect    off; 
    proxy_ssl_certificate       client.crt;
    proxy_ssl_certificate_key   client.key;
    proxy_ssl_trusted_certificate  trusted_ca.pem;   # 指定 CA 证书用于验证代理 HTTPS 服务器的证书
    proxy_ssl_verify on;     # 开启代理 HTTPS 服务器证书的验证
    proxy_pass https://api.example.com;
}

打赏