# Enable SSL and specify the ports
listeners.tcp.default = 5672
listeners.ssl.default = 5671

# Specify the SSL certificate and key files
ssl_options.cacertfile = /etc/rabbitmq/ssl/ca.crt
ssl_options.certfile   = /etc/rabbitmq/ssl/rabbitmq.pem
ssl_options.keyfile    = /etc/rabbitmq/ssl/rabbitmq.key

# SSL connection options
ssl_options.verify = verify_peer
ssl_options.fail_if_no_peer_cert = true