Domain & TLS Certificate Configuration

The MCM platform supports configuring a custom domain name and replacing the default self-signed TLS certificates with your own CA-signed certificates.

---

1. Configure Domain (Optional)

By default, the platform uses the server's public IP address. To configure a custom domain:

1. Update the DOMAIN variable in /etc/mcm/user_config.env (replace mcm.example.com with your actual domain name):

   sudo sed -i 's/DOMAIN=/DOMAIN=mcm.example.com/' /etc/mcm/user_config.env

2. Restart the platform to apply changes and automatically regenerate TLS certificates:

   sudo bash /opt/mcm/scripts/restart.sh

---

2. Replace Self-Signed Certificates (Optional)

To secure the platform gateway with CA-signed TLS certificates instead of the default self-signed certificates:

If you already have valid SSL/TLS certificates for your domain:

1. Copy your CA-signed certificate and private key to the configuration directory:

   sudo cp your_certificate.crt /etc/mcm/certs/server.crt
   sudo cp your_private_key.key /etc/mcm/certs/server.key

2. Disable the automatic generation of self-signed certificates:

   sudo sed -i 's/GENERATE_SELF_SIGN_CERTS=true/GENERATE_SELF_SIGN_CERTS=false/' /etc/mcm/user_config.env

3. Restart the platform to apply your certificates:

   sudo bash /opt/mcm/scripts/restart.sh

---