www-certificate verifiedimportantWritten by the Hub
Console certificate
in the configuration this is a line
www-certificate: Certificate presented on the console's TLS port.
Values
- Values
path to a PEM certificate- Default
· taken from the build- applying
restart required- where it can be set
in the config file · with a startup flag · as an environment variable
In detail
Empty by default, and its absence is why the panel is plain HTTP. A self-signed certificate removes eavesdropping but not impersonation — the browser will warn, and the operator will click through, which is a habit worth avoiding on a panel that controls sending. Where the node has a real hostname, a proper certificate is better and costs the same effort as for a tracking domain, which Hub already automates.
What happens if you get it wrong
Absent while the console is bound to a public address.Every login sends the console password across the network in clear text.verified by experiment · inference
Present without www-privatekey.TLS cannot start; the secure port refuses connections.inference · inference