server {
    listen          *:443;
    server_name         _;
    client_max_body_size        32m;
 
    ssl_certificate         /etc/nginx/ssl/server.crt;
    ssl_certificate_key     /etc/nginx/ssl/server.nopass.key;
    ssl_client_certificate  /etc/nginx/ssl/ca.crt;
    ssl_verify_client       on;
    ssl_protocols       SSLv3 TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers             HIGH:!aNULL:!MD5;
    ssl_crl             /etc/nginx/ssl/crl.pem;
    ssl on;
 
    location / {
    proxy_pass      https://enter.taxiwest.ru/;
#   proxy_redirect      https://enter.taxiwest.ru/;
    proxy_redirect      off;
    proxy_set_header    Host $host;
#   proxy_set_header    Host enter.taxiwest.ru;
    proxy_set_header    X-Real-IP $remote_addr;
    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_connect_timeout   1800;
    proxy_send_timeout  1800;
    proxy_read_timeout  1800;
    client_max_body_size    32m;
    proxy_ssl_certificate   /etc/nginx/ssl/e22312179bf43e61576081a2f250f845.crt;
    proxy_ssl_certificate_key       /etc/nginx/ssl/e22312179bf43e61576081a2f250f845.key;
    }
 
 
    access_log          /var/log/nginx/cloud/cloud.access.log;
    error_log           /var/log/nginx/cloud/cloud.error.log debug;
#    root /var/www;
#    charset cp1251;
#    index index.php;
#    rewrite_log on;
#    autoindex off;
#    client_max_body_size 100m;
 
    keepalive_timeout       70;
    fastcgi_param       SSL_VERIFIED $ssl_client_verify;
    fastcgi_param       SSL_CLIENT_SERIAL $ssl_client_serial;
    fastcgi_param       SSL_CLIENT_CERT $ssl_client_cert;
#    fastcgi_param      SSL_DN $ssl_client_s_dn;
 
}