diff --git a/.gitignore b/.gitignore
index 5e6ed74..d66458b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,6 @@ db.env
 /.idea/modules.xml
 /.idea/nextcloud-jevalideca-compose.iml
 /.idea/vcs.xml
+cfssl/ca.csr
+cfssl/ca.pem
+cfssl/ca-key.pem
diff --git a/cfssl/config_server.json b/cfssl/config_server.json
new file mode 100644
index 0000000..fa00e87
--- /dev/null
+++ b/cfssl/config_server.json
@@ -0,0 +1,54 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h"
+    },
+    "profiles": {
+      "intermediate_ca": {
+        "usages": [
+          "signing",
+          "digital signature",
+          "key encipherment",
+          "cert sign",
+          "crl sign",
+          "server auth",
+          "client auth"
+        ],
+        "expiry": "8760h",
+        "ca_constraint": {
+          "is_ca": true,
+          "max_path_len": 0,
+          "max_path_len_zero": true
+        }
+      },
+      "peer": {
+        "usages": [
+          "signing",
+          "digital signature",
+          "key encipherment",
+          "client auth",
+          "server auth"
+        ],
+        "expiry": "8760h"
+      },
+      "server": {
+        "usages": [
+          "signing",
+          "digital signing",
+          "key encipherment",
+          "server auth"
+        ],
+        "expiry": "8760h"
+      },
+      "client": {
+        "usages": [
+          "signing",
+          "digital signature",
+          "key encipherment",
+          "client auth"
+        ],
+        "expiry": "8760h"
+      }
+    }
+  }
+}
\ No newline at end of file