diff --git a/nginx/default.conf b/nginx/default.conf
index ed129289f..e47ac2934 100644
--- a/nginx/default.conf
+++ b/nginx/default.conf
@@ -22,6 +22,9 @@ server {
         proxy_set_header Host $http_host;
         proxy_set_header X-NginX-Proxy true;
 
+        # specific for infisical cloud setup, needed for server-side mTLS
+        proxy_set_header X-SSL-Client-Cert $http_x_amzn_mtls_clientcert
+
         proxy_pass http://backend:4000;
         proxy_redirect off;