trying the certifcate check as well

terraform/nginx_config.tftpl

@@ -46,6 +46,7 @@ server {
 	location ^~ /wp-content {
         # Logs the IP in "deny IP;" format to your specific file
 		access_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;
+                access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;
 		return 444; 
 	}
 
@@ -67,6 +68,11 @@ server {
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
 
+        # Client Certificate Config
+        ssl_client_certificate /etc/nginx/certs/MyPrivateCA.crt;
+        ssl_verify_client optional; # 'optional' so we can check the result manually
+
+
 }
 %{~ if redirect_to_https_bool~}