test coverage improvements; mTLS enforcement; agent broke :(

nginx/configs/nginx.conf

@@ -65,6 +65,7 @@ http {
         ssl_certificate_key /certs/key.pem;
         include options-ssl.conf;
         include options-https-headers.conf;
+        ssl_verify_client optional_no_ca;
 
         client_max_body_size 50M;
         limit_conn perip_conn 30;
@@ -93,6 +94,10 @@ http {
             proxy_set_header X-Forwarded-For $forwarded_for;
             proxy_set_header X-Forwarded-Proto  $scheme;
             proxy_set_header X-Forwarded-Host $host;
+            proxy_set_header X-Keywarden-TLS-Client-Verify $ssl_client_verify;
+            proxy_set_header X-Keywarden-TLS-Client-Cert $ssl_client_escaped_cert;
+            proxy_set_header X-Keywarden-TLS-Client-Fingerprint $ssl_client_fingerprint;
+            proxy_set_header X-Keywarden-TLS-Client-Serial $ssl_client_serial;
         }
         
         location / {