{%- for k, v in j2cfg.tls.conf_cmd.items() %}
proxy_ssl_conf_command  {{ k }}  {{ v | ngx_esc }};
{%- endfor %}

proxy_ssl_trusted_certificate {{ env.NGX_SSL_CERT_FILE }};
proxy_ssl_verify on;
proxy_ssl_server_name on;