proxy_ssl_verify                  on;
proxy_ssl_verify_depth            3;
proxy_ssl_server_name             on;
proxy_ssl_trusted_certificate     /etc/ssl/certs/ca-certificates.crt;
