This commit is contained in:
Dallas Lu 2026-06-09 14:41:15 +08:00
parent c50569d73e
commit a624163120
No known key found for this signature in database
27 changed files with 215 additions and 6 deletions

View file

@ -0,0 +1,6 @@
# Enable SNI when proxy_pass targets an HTTPS origin by hostname. Without this,
# multi-tenant upstreams can return the wrong certificate or application.
proxy_ssl_server_name on;
# Do not force proxy_ssl_name or proxy_ssl_verify here. Those depend on whether
# the caller proxies to a hostname, an upstream block, or a private CA.