From 7d6af649040af5a710ec1f78cac14c0b106b6c87 Mon Sep 17 00:00:00 2001
From: Sheen Capadngan <sheensantoscapadngan@gmail.com>
Date: Tue, 20 Aug 2024 01:53:47 +0800
Subject: [PATCH] misc: added proxy header for amazon mtls client cert

---
 nginx/default.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nginx/default.conf b/nginx/default.conf
index ed129289f..e47ac2934 100644
--- a/nginx/default.conf
+++ b/nginx/default.conf
@@ -22,6 +22,9 @@ server {
         proxy_set_header Host $http_host;
         proxy_set_header X-NginX-Proxy true;
 
+        # specific for infisical cloud setup, needed for server-side mTLS
+        proxy_set_header X-SSL-Client-Cert $http_x_amzn_mtls_clientcert
+
         proxy_pass http://backend:4000;
         proxy_redirect off;