listen_addresses = '*' ssl = on ssl_cert_file = '/certs/server.crt' ssl_key_file = '/certs/server.key' ssl_ca_file = '/certs/root.crt'