This is a very reduced configuration for nginx, which should use different configurations for TLS connections, based on SNI names.
Some of them need additional client authentication via client certificates.
When I try to configure it, nging -t claims, that the mapped variable is not valid for ssl_verify_client:
invalid value "$svc" in /etc/nginx/sites-enabled/default:24
The configuration looks like: