Enable HTTPS Failing

[static-au]

Created the cert and key

~# ls -lah /etc/pulse/ | grep pem
-rw------- 1 root root 1.3K Nov 4 15:18 cert.pem
-rw------- 1 root root 1.7K Nov 4 15:17 key.pem

I have edited the pulse.service

~# sudo systemctl edit pulse

Added

Anything between here...

[Service]
Environment="HTTPS_ENABLED=true"
Environment="TLS_CERT_FILE=/etc/pulse/cert.pem"
Environment="TLS_KEY_FILE=/etc/pulse/key.pem"

Edits below this

~# sudo systemctl daemon-reload
~# sudo systemctl restart pulse

But the service cant start?

● pulse.service - Pulse Monitoring Server
Loaded: loaded (/etc/systemd/system/pulse.service; enabled; preset: enabled)
Drop-In: /etc/systemd/system/pulse.service.d
└─override.conf
Active: activating (auto-restart) (Result: exit-code) since Tue 2025-11-04 16:05:27 AEDT; 1s ago
Invocation: 3cbf336ab716468a826dec9b04a5a170
Process: 3373 ExecStart=/opt/pulse/bin/pulse (code=exited, status=1/FAILURE)
Main PID: 3373 (code=exited, status=1/FAILURE)
Mem peak: 5.3M
CPU: 29ms

Anyone seen this issue?

[rcourtman]

Pulse runs as the pulse user. Your cert/key are 0600 root:root, so TLS key opens fail and the unit restarts. Fix the ownership, restart, then check the journal.

sudo chown pulse:pulse /etc/pulse/cert.pem /etc/pulse/key.pem
sudo chmod 600 /etc/pulse/key.pem
sudo chmod 640 /etc/pulse/cert.pem
sudo systemctl restart pulse
journalctl -u pulse.service -b

[static-au]

Awesome, worked like a charm.
Much appreciated.