mailcow-dockerized/data/conf/nginx/includes/ssl_client_auth.conf

ssl_verify_client      optional;
ssl_client_certificate /etc/nginx/conf.d/client_cas.crt;