Adding Custom Certificates

Learn how to configure Infisical with custom certificates

By default, the Infisical Docker image includes certificates from well-known public certificate authorities. However, some integrations with Infisical may need to communicate with your internal services that use private certificate authorities. To configure trust for custom certificates, follow these steps. This is particularly useful for connecting Infisical with self-hosted services like GitLab.

Prerequisites

• Docker
• Standalone Infisical image
• Certificate public key .pem files

Setup

1. Place all your public key .pem files into a single directory.
2. Mount the directory containing the .pem files to the usr/local/share/ca-certificates/ path in the Infisical container.
3. Set the following environment variable on your Infisical container:

   NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
   

4. Start the Infisical container.

By following these steps, your Infisical container will trust the specified certificates, allowing you to securely connect Infisical to your internal services.