server {
    listen 			*:443;
    server_name  		_;
    client_max_body_size       	32m;

    ssl_certificate 		/etc/nginx/ssl/server.crt;
    ssl_certificate_key 	/etc/nginx/ssl/server.nopass.key;
    ssl_client_certificate 	/etc/nginx/ssl/ca.crt;
    ssl_verify_client 		on;
    ssl_protocols		SSLv3 TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         	HIGH:!aNULL:!MD5;
    ssl_crl 			/etc/nginx/ssl/crl.pem;
    ssl on;

	location / {
	proxy_pass 		https://enter.taxiwest.ru/;
#	proxy_redirect		https://enter.taxiwest.ru/;
	proxy_redirect 		off;
	proxy_set_header 	Host $host;
#	proxy_set_header	Host enter.taxiwest.ru;
	proxy_set_header 	X-Real-IP $remote_addr;
	proxy_set_header 	X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_connect_timeout	1800;
	proxy_send_timeout	1800;
	proxy_read_timeout	1800;
	client_max_body_size	32m;
	proxy_ssl_certificate	/etc/nginx/ssl/e22312179bf43e61576081a2f250f845.crt;
	proxy_ssl_certificate_key		/etc/nginx/ssl/e22312179bf43e61576081a2f250f845.key;
	}


    access_log			/var/log/nginx/cloud/cloud.access.log;
    error_log			/var/log/nginx/cloud/cloud.error.log debug;
#    root /var/www;
#    charset cp1251;
#    index index.php;
#    rewrite_log on;
#    autoindex off;
#    client_max_body_size 100m;

    keepalive_timeout		70;
    fastcgi_param		SSL_VERIFIED $ssl_client_verify;
    fastcgi_param		SSL_CLIENT_SERIAL $ssl_client_serial;
    fastcgi_param		SSL_CLIENT_CERT $ssl_client_cert;
#    fastcgi_param		SSL_DN $ssl_client_s_dn;

}