certificates_files.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# Renew these files with an external ACME client. No Shoes reload is required.
- certificate_source: public
  type: files
  cert: /etc/shoes/certs/fullchain.pem
  key: /etc/shoes/certs/privkey.pem

- address: "0.0.0.0:8443"
  protocol:
    type: tls
    tls_targets:
      proxy.example.com:
        certificate_source: public
        protocol:
          type: trojan
          password: replace-with-a-strong-password

- address: "0.0.0.0:8443"
  transport: quic
  quic_settings:
    certificate_source: public
  protocol:
    type: hysteria2
    password: replace-with-a-strong-password

View source at this revision