Forum Debian Users Gang

 # ssl on;
        ssl_verify_client optional;
        ssl_verify_depth 5;
        if ($ssl_client_verify != SUCCESS) { return 404; }

RewriteCond %REMOTE_ADDR !^192\.168\.
RewriteCond %REQUEST_URI costam [OR]
RewriteCond %REQUEST_URI cosinnego
RewriteRule (.*) - [R=404,L]

        ssl_verify_client optional;
        ssl_verify_depth 5;
        if ($ssl_client_verify != SUCCESS) { return 404; }

curl -Ivk https://domek/www/ 
*   Trying 127.0.0.1:443...
* Connected to domek (127.0.0.1) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
* [CONN-0-0][CF-SSL] TLSv1.3 (OUT), TLS handshake, Client hello (1):
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, Server hello (2):
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, Certificate (11):
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, CERT verify (15):
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, Finished (20):
* [CONN-0-0][CF-SSL] TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* [CONN-0-0][CF-SSL] TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=domek
*  start date: Feb 15 02:58:42 2023 GMT
*  expire date: May 16 02:58:41 2023 GMT
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* Using HTTP2, server supports multiplexing
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* h2h3 [:method: HEAD]
* h2h3 [:path: /www/]
* h2h3 [:scheme: https]
* h2h3 [:authority: domek]
* h2h3 [user-agent: curl/7.87.0]
* h2h3 [accept: */*]
* Using Stream ID: 1 (easy handle 0x5e7e199c9eb0)
> HEAD /www/ HTTP/2
> Host: domek
> user-agent: curl/7.87.0
> accept: */*
> 
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* [CONN-0-0][CF-SSL] TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
< HTTP/2 404 
HTTP/2 404 
< server: nginx
server: nginx
< date: Mon, 20 Feb 2023 07:49:08 GMT
date: Mon, 20 Feb 2023 07:49:08 GMT
< content-type: text/html
content-type: text/html
< content-length: 146
content-length: 146
< vary: Accept-Encoding
vary: Accept-Encoding
< set-cookie: uid=fwAAAWPzJfRKngO0AwMIAg==; expires=Tue, 20-Feb-24 07:49:08 GMT; domain=domek; path=/
set-cookie: uid=fwAAAWPzJfRKngO0AwMIAg==; expires=Tue, 20-Feb-24 07:49:08 GMT; domain=domek; path=/
< p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"

< 
* Connection #0 to host domek left intact