TLS

server.insecure-skip-tls-verify: true (or --insecure-tls) disables certificate verification and emits a per-request stderr warning. Keep it off in production.