mirror of
https://github.com/netbirdio/netbird.git
synced 2026-09-12 17:59:06 +02:00
The clients refuse a plaintext upload service: they ask it for an upload URL and then PUT the bundle to whatever comes back, so a plaintext hop exposes both. An operator pointing their deployment at this server therefore needs it to speak https, and until now it could only do so behind a separate terminator. SERVER_CERT_FILE and SERVER_KEY_FILE switch it to ListenAndServeTLS. They must be set together. Unset keeps the current plaintext listener, for a deployment that does terminate TLS in front of it.