server { listen 2443 default ssl; ssl_protocols TLSv1.2; {{ if .Values.global.aafEnabled }} ssl_certificate {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_pem}}; ssl_certificate_key {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_key}}; {{ else }} ssl_certificate /etc/ssl/clamp.pem; ssl_certificate_key /etc/ssl/clamp.key; {{ end }} ssl_verify_client optional_no_ca; location /restservices/clds/ { proxy_pass https://clamp-backend:443; proxy_set_header X-SSL-Cert $ssl_client_escaped_cert; } location / { root /usr/share/nginx/html; index index.html index.htm; try_files $uri $uri/ /index.html; } error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } }