TLS External API

I’ve been trying to setup external https access to the application server. I used Letsencrypt to generate certificate and key, but not sure what to insert in the chirpstack-application-server.toml file.
I’ve tried pasting in the certificate and private key in text, but got errors with “unescaped characters”.
I’ve tried setting the path to the cert.pem and privkey.pem files, but got “permission denied” when looking through the logfile.

Should the .toml file contain the actual certificates? Or simply a path to where they are located? I tried including “localhost:” in front of the path also. That at least put quotes around the tls-cert parameter reported in the logfile.
Path to certifcates is: /etc/letsencrypt/live/xyz.com/

If I remove the tls info from the .toml file: all works fine, but no https access, only http.

Please advise.

The fields should contain the path the the certificate files.

but got “permission denied” when looking through the logfile.

This indicates that the AS process is unable to read the files. Make sure these are readable by the AS user :slight_smile: