https://darshit.dev/posts/two-way-ssl-nginx/