Essa é minha configuração atual:
server {
listen 443 ssl http2;
server_name pay.peticoesonline.com.br;
root /home/bichofresquim/public_html;
index index.php index.html index.htm;
ssl_certificate /etc/letsencrypt/live/pay.peticoesonline.com.br/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/pay.peticoesonline.com.br/privkey.pem;
#ssl_client_certificate /etc/letsencrypt/live/pay.peticoesonline.com.br/chain.pem;
ssl_client_certificate /home/paypo//chain-pix-prod.crt;
ssl_verify_client optional;
ssl_verify_depth 3;
include snippets/ssl.conf;
include snippets/security.conf;
location /webhook {
if ($ssl_client_verify != SUCCESS) {
return 403;
}
proxy_pass /webhook;
}
location / {
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Accept-Encoding "";
proxy_pass http://apache;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Connection "Upgrade";
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
proxy_ignore_client_abort on;
}
}
