# Please see https://docs.nginx.com/nginx/admin-guide/security-controls/securing-tcp-traffic-upstream/ for discussion on how to optionally configure this file

proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
proxy_ssl_session_reuse on;
proxy_ssl_verify off;
proxy_ssl_server_name on;

#proxy_ssl_trusted_certificate <client certificate>;
#proxy_ssl_verify on;
#proxy_ssl_verify_depth 2;