From 528b1c191fbb200bdf5bbc19a3d4ff37ca4aba94 Mon Sep 17 00:00:00 2001 From: Francis Lavoie Date: Sun, 19 Nov 2023 01:16:46 -0500 Subject: [PATCH] Add SNI note to proxy example --- src/docs/markdown/caddyfile/directives/reverse_proxy.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/docs/markdown/caddyfile/directives/reverse_proxy.md b/src/docs/markdown/caddyfile/directives/reverse_proxy.md index ab30fbe..4852142 100644 --- a/src/docs/markdown/caddyfile/directives/reverse_proxy.md +++ b/src/docs/markdown/caddyfile/directives/reverse_proxy.md @@ -735,12 +735,13 @@ reverse_proxy 10.0.0.1:443 { ``` -Instead you may establish trust with the upstream by explicitly [trusting the upstream's certificate](#tls_trusted_ca_certs): +Instead you may establish trust with the upstream by explicitly [trusting the upstream's certificate](#tls_trusted_ca_certs), and (optionally) setting TLS-SNI to match the hostname in the upstream's certificate: ```caddy-d reverse_proxy 10.0.0.1:443 { transport http { tls_trusted_ca_certs /path/to/cert.pem + tls_server_name app.example.com } } ```