server{ location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_pass http://10.8.0.2:5000; proxy_read_timeout 90; } server_name site1.test.dev; listen 443 ssl http2; ssl_certificate /etc/nginx/conf.d/cert.pem; ssl_certificate_key /etc/nginx/conf.d/private.key; ssl_client_certificate /etc/nginx/conf.d/origin-pull-ca.pem; ssl_verify_client on; } server{ location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_pass http://10.8.0.2:5001; proxy_read_timeout 90; } server_name site2.test.dev; listen 443 ssl http2; ssl_certificate /etc/nginx/conf.d/cert.pem; ssl_certificate_key /etc/nginx/conf.d/private.key; ssl_client_certificate /etc/nginx/conf.d/origin-pull-ca.pem; ssl_verify_client on; }