add config option to enable or disable TLS for nats

services/audit/pkg/config/config.go

@@ -28,6 +28,7 @@ type Events struct {
 	ConsumerGroup        string `yaml:"group" env:"AUDIT_EVENTS_GROUP" desc:"The consumergroup of the service. One group will only get one copy of an event."`
 	TLSInsecure          bool   `yaml:"tls_insecure" env:"OCIS_INSECURE;AUDIT_EVENTS_TLS_INSECURE" desc:"Whether to verify the server TLS certificates."`
 	TLSRootCACertificate string `yaml:"tls_root_ca_certificate" env:"AUDIT_EVENTS_TLS_ROOT_CA_CERTIFICATE" desc:"The root CA certificate used to validate the server's TLS certificate. If provided AUDIT_EVENTS_TLS_INSECURE will be seen as false."`
+	EnableTLS            bool   `yaml:"enable_tls" env:"OCIS_EVENTS_ENABLE_TLS;AUDIT_EVENTS_ENABLE_TLS" desc:"Enable TLS for the connection to the events broker."`
 }
 
 // Auditlog holds audit log information

services/audit/pkg/config/defaults/defaultconfig.go

@@ -25,6 +25,7 @@ func DefaultConfig() *config.Config {
 			Endpoint:      "127.0.0.1:9233",
 			Cluster:       "ocis-cluster",
 			ConsumerGroup: "audit",
+			EnableTLS:     false,
 		},
 		Auditlog: config.Auditlog{
 			LogToConsole: true,