CAFile is the name of Certificate for the root CA (can be self-signed, in which case it should be provided to the client too), use `make gencert` to generate.

DefaultConfigDir is the default directory for the key material if TLS is enabled, but TlsConfigDirEnv is not defined,.

ServerCertFile is the Server certificate (containing the valid host names), use `make gencert` to generate.

ServerKeyFile the private signing key for the certificate, use `make gencert` to generate.

TlsConfigDirEnv is the env var which defines where are the certs and keys stored.