{ debug } :443 { tls /certs/soteria.crt /certs/soteria.key { protocols tls1.3 client_auth { mode require_and_verify trust_pool file { pem_file /certs/root_ca.crt } } } reverse_proxy rest-server:8000 }