server {
    listen 80 default_server reuseport;
    server_name test.example.com;

    location / {
      add_header Access-Control-Allow-Origin "*";
    }

    return 301 https://$server_name$request_uri;
}


server {
    listen 443 ssl http2 default_server reuseport;
    server_name test.example.com;

    ssl_certificate /etc/letsencrypt/live/test.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/test.example.com/privkey.pem;

    ssl_client_certificate /etc/nginx/client-cert/ca.crt;
    ssl_verify_client optional;

    root /var/www/erp-develop/public;

    location / {
      try_files $uri $uri/ /index.php$is_args$args;

      add_header Access-Control-Allow-Origin "*";
      add_header 'Cache-Control' 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
      expires -1;
      index index.php;

    }
   ...
}