diff --git a/docs/docs/documentation/getting-started/installation/backend-config.md b/docs/docs/documentation/getting-started/installation/backend-config.md index fdad87700a1..bd82a09a4db 100644 --- a/docs/docs/documentation/getting-started/installation/backend-config.md +++ b/docs/docs/documentation/getting-started/installation/backend-config.md @@ -61,6 +61,15 @@ Changing the webworker settings may cause unforeseen memory leak issues with Mea | --------------- | :-----: | ----------------------------------------------------------------------------- | | UVICORN_WORKERS | 1 | Sets the number of workers for the web server. [More info here][unicorn_workers] | +### TLS + +Use this only when mealie is run without a webserver or reverse proxy. + +| Variables | Default | Description | +| -------------------- | :-----: | ------------------------ | +| TLS_CERTIFICATE_PATH | None | File path to Certificate | +| TLS_PRIVATE_KEY_PATH | None | File path to private key | + ### LDAP | Variables | Default | Description | diff --git a/mealie/core/settings/settings.py b/mealie/core/settings/settings.py index 5f97557eed2..dd9686a9af9 100644 --- a/mealie/core/settings/settings.py +++ b/mealie/core/settings/settings.py @@ -353,6 +353,15 @@ def OPENAI_ENABLED(self) -> bool: model_config = SettingsConfigDict(arbitrary_types_allowed=True, extra="allow") + # =============================================== + # TLS + + TLS_CERTIFICATE_PATH: str | os.PathLike[str] | None = None + """Path where the certificate resides.""" + + TLS_PRIVATE_KEY_PATH: str | os.PathLike[str] | None = None + """Path where the private key resides.""" + def app_settings_constructor(data_dir: Path, production: bool, env_file: Path, env_encoding="utf-8") -> AppSettings: """ diff --git a/mealie/main.py b/mealie/main.py index d1810bd2268..d85d2de9fb3 100644 --- a/mealie/main.py +++ b/mealie/main.py @@ -13,6 +13,8 @@ def main(): log_config=log_config(), workers=settings.WORKERS, forwarded_allow_ips=settings.HOST_IP, + ssl_keyfile=settings.TLS_PRIVATE_KEY_PATH, + ssl_certfile=settings.TLS_CERTIFICATE_PATH, )