Skip to main content
The certs commands support local HTTPS. Generate missing certificate material through the template’s init service, then explicitly trust that site’s local certificate authority on the workstation:
Generation retains existing keys and certificates. Trust changes the operating system trust store and can request administrator privileges, so confirm the active context and inspect certs/rootCA.pem first. Production certificates should use the ingress component’s managed or custom-certificate workflow, not a development certificate authority.

​
Reference

Manage the local certificate authority used by site ingress

​
certs regenerate

Run the shared certificate generator in the Compose init service. Existing keys and certificates are retained; remove them explicitly before requesting replacement.

​
certs trust

Trust certs/rootCA.pem from the active site on this workstation. This changes the local OS trust store and may request administrator privileges on Linux.