TLS Configuration

By default, Gate does not use TLS. You can enable it with the tls enabled option.

If a valid certificate is not provided, a self-signed certificate is generated on the fly.

caution

You should not use Gate's self-signed certificates in production.

Environment variables

GATE_TLS_ENABLED=true
GATE_TLS_CERT_FILE=/etc/certs/local-cert.pem
GATE_TLS_KEY_FILE=/etc/certs/local-key.pem

HCL

gate = {
  tls = {
    cert = {
      file = "/etc/certs/local-cert.pem"
    }

    key = {
      file = "/etc/certs/local-key.pem"
    }
  }

  // ...
}

JSON

{
  "gate": {
    "tls": {
      "cert": {
        "file": "/etc/certs/local-cert.pem"
      },
      "key": {
        "file": "/etc/certs/local-key.pem"
      }
    },
    // ...

TOML

[gate.tls]
enabled = "true"

[Gate.tls.cert]
file = "/etc/certs/local-cert.pem"

[Gate.tls.key]
file = "/etc/certs/local-key.pem"

YAML

gate:
  tls:
    cert:
      file: /etc/certs/local-cert.pem
    enabled: "true"
    key:
      file: /etc/certs/local-key.pem