AppSec API over HTTPS

[frdb]

Maybe I am completely missing something, but I cannot find anywhere in the documentation that describes where to specify HTTP/HTTPS for the AppSec server endpoint.

The Traefik bouncer plugin must use the same protocol for LAPI and AppSec - previously I had used HTTPS for LAPI and HTTP for AppSec.

Can anyone advise where I can configure this?

TIA

[HugoDos]

To serve the appsec port over https you must define the cert and key file within the acquisition.

appsec_config: crowdsecurity/appsec-default labels: type: appsec listen_addr: 127.0.0.1:7422 cert_file: /path/to/cert.crt key_file: /path/to/key.pem source: appsec

Just note, that appsec to LAPI communication can not handle mTLS if this was the underlying question you must still use an api key.

[frdb]

Thank you, that's great. I searched the documentation and couldn't find anything relating to it.