TLS Configuration

Configure TLS for secure access. Set the RUSTFS_TLS_PATH environment variable.

ConfigurationCopy Anchor Link

PrerequisitesCopy Anchor Link

• A running RustFS instance (see Installation Guide).
• A TLS certificate and its matching private key.

Note: Certificates must be named rustfs_cert.pem and rustfs_key.pem and placed in the specified path.

LinuxCopy Anchor Link

1. Edit the RustFS instance configuration file (default /etc/default/rustfs) and add the RUSTFS_TLS_PATH environment variable.

   Copy Text

   # Edit RustFS instance configuration file
   sudo vi /etc/default/rustfs
   
   # Add RUSTFS_TLS_PATH environment variable
   RUSTFS_TLS_PATH="/opt/tls"

Note: You can specify any path for RUSTFS_TLS_PATH, but it must contain both rustfs_cert.pem and rustfs_key.pem.

2. Restart the RustFS instance.

   Copy Text

   systemctl restart rustfs

TLS now applies to both listeners: the S3 API at https://rustfs.example.com:9000 and the Console at https://rustfs.example.com:9001.

DockerCopy Anchor Link

1. Mount the certificate path via -v and specify RUSTFS_TLS_PATH via -e.

   Copy Text

       docker pull rustfs/rustfs:latest
       docker run -d \
       --name rustfs \
       -e RUSTFS_TLS_PATH="/opt/tls/" \
       -v /opt/tls:/opt/tls \
       -p 9000:9000 \
       -p 9001:9001 \
       -v /data:/data \
       rustfs/rustfs:latest

2. Restart the RustFS instance container, then access the S3 API at https://rustfs.example.com:9000 and the Console at https://rustfs.example.com:9001.