Hey @I_am_winner,
You will need to use environment variables instead of editing the server.conf file directly.
GRAYLOG_HTTP_TLS_CERT_FILE: /usr/share/graylog/data/config/cert.pem
GRAYLOG_HTTP_TLS_KEY_FILE: /usr/share/graylog/data/config/privkey.pem
GRAYLOG_SERVER_JAVA_OPTS:"Djavax.net.ssl.trustStore=/usr/share/graylog/data/config/cacerts -Djavax.net.ssl.trustStorePassword=changeit"
You can persist the paths to those certs and key store by using volumes.
volumes:
- "graylog_data:/usr/share/graylog/data/data"
- "graylog_journal:/usr/share/graylog/data/journal"
- "graylog_config:/usr/share/graylog/data/config"
The keystore is required for the Graylog nodes to make api calls to each other and themselves. The CA or node cert should be added to the keystore.