ldap-auth.conf

auth_request    /validate;

location = /validate {
  proxy_pass                        https://auth.shore.co.il/validate;
  proxy_http_version                1.1;
  proxy_ssl_verify                  on;
  proxy_ssl_verify_depth            3;
  proxy_ssl_name                    auth.shore.co.il;
  proxy_ssl_server_name             on;
  proxy_ssl_trusted_certificate     /etc/ssl/certs/ca-certificates.crt;
  internal;
  proxy_pass_request_body           off;
  proxy_set_header Content-Length   "";
}