caddy client certificates

(ssl_setup_files) {
        tls /etc/caddy/fullchain.cer /etc/caddy/xxxxxx.org.key {
                protocols tls1.3
                alpn http/1.1
                client_auth {
                        mode require_and_verify
                        trusted_ca_cert_file /etc/caddy/ca.crt
                        trusted_leaf_cert_file /etc/caddy/aaaaaa.crt
                        trusted_leaf_cert_file /etc/caddy/bbbbbb.crt
                }
        }
        header {
                -Server
        }
        encode gzip
}

files.xxxxxx.org:443 {
        import ssl_setup_files
        reverse_proxy 192.168.0.126:8228

}