View source for Nginx:Vhost SSL Origin Cloudflare

 server {
         listen 80;
         listen [::]:80;
         listen 443 ssl http2;
         listen [::]:443 ssl http2;
         
         server_name wiki.your-domain.com;
         root /var/www/mediawiki;
         index index.php;
         
         ssl_certificate /etc/ssl/certs/cloudflare_kangtain.com.pem;
         ssl_certificate_key /etc/ssl/private/cloudflare_key_kangtain.com.pem;
         ssl_client_certificate /etc/ssl/certs/origin-pull-ca.pem;
         ssl_verify_client on;
         
         error_log /var/log/nginx/kangtain.com.error;
         access_log /var/log/nginx/kangtain.com.access;
         
         location / {
                 try_files $uri $uri/ /index.php;
         }
 
         location ~ /.well-known {
             allow all;
         }
 
         location ~ /\.ht {
           deny all;
          }
          
         location /rest.php {
           try_files $uri $uri/ /rest.php?$args;
         }
 
         location ~ \.php$ {
             fastcgi_pass unix:/run/php/php7.4-fpm.sock;
             fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
             include fastcgi_params;
             include snippets/fastcgi-php.conf;
         }
 }

==Source==
*[https://websiteforstudents.com/how-to-setup-cloudflare-origin-certificates-with-nginx-on-ubuntu-16-04-18-04/ websiteforstudents.com]