leafnodes Configuration Block
| Property | Description | 
|---|---|
| advertise | Hostport <host>:<port>to advertise to other servers. | 
| authorization | Authorization block (same as other nats-server authorizationconfiguration). | 
| host | Interface where the server will listen for incoming leafnode connections. | 
| listen | Combines hostandportas<host>:<port> | 
| no_advertise | if truethe leafnode shouldn't be advertised. | 
| port | Port where the server will listen for incoming leafnode connections. | 
| remotes | List of remoteentries specifying servers where leafnode client connection can be made. | 
| tls | TLS configuration block (same as other nats-server tlsconfiguration). | 
LeafNode remotes Entry Block
| Property | Description | 
|---|---|
| url | Leafnode URL (URL protocol should be nats-leaf). | 
| urls | Leafnode URL array. Supports multiple URLs for discovery, e.g., urls: [ "nats-leaf://host1:7422", "nats-leaf://host2:7422" ] | 
| account | Account public key identifying the leafnode. Account must be defined locally. | 
| credentials | Credential file for connecting to the leafnode server. | 
| tls | A TLS configuration block. Leafnode client will use specified TLS certificates when connecting/authenticating. | 
tls Configuration Block
| Property | Description | 
|---|---|
| cert_file | TLS certificate file. | 
| key_file | TLS certificate key file. | 
| ca_file | TLS certificate authority file. | 
| insecure | Skip certificate verification. | 
| verify | If true, require and verify client certificates. | 
| verify_and_map | If true, require and verify client certificates and use values map certificate values for authentication purposes. | 
| cipher_suites | When set, only the specified TLS cipher suites will be allowed. Values must match golang version used to build the server. | 
| curve_preferences | List of TLS cypher curves to use in order. | 
| timeout | TLS handshake timeout in fractional seconds. |