Optional post-installation tasks
Use these optional tasks to customize WHD after a successful base installation.
Optional task 1: Use an external PostgreSQL database
-
Set WHD_DB_HOST, WHD_DB_PORT, WHD_DB_NAME, WHD_DB_USER, and WHD_DB_PASSWORD in
conf/whd.env. -
Restart backend service and validate datasource connectivity.
Optional task 2: Replace default TLS certificate
-
Replace
conf/cert.pemandconf/key.pemwith CA-signed files. -
Restart Caddy service and verify certificate chain from a browser or openssl.
Optional task 3: Customize HTTP behavior
-
Use
WHD_HTTP_IMPORT=http-redirect.caddy(default) to force HTTPS. -
Use
WHD_HTTP_IMPORT=http-serve.caddyonly for legacy/non-redirect behavior when approved.
Optional task 4: Tune JVM memory
-
Adjust WHD_JVM_MIN_MEMORY and WHD_JVM_MAX_MEMORY in
conf/whd.envfor larger deployments. -
Restart backend service after memory changes.
Optional task 5: FIPS mode (Windows only)
-
Set WHD_FIPS_ENABLED=true in
conf/whd.envafter completing required Windows FIPS prerequisites. -
Use the FIPS setup guide to validate provider registration and TLS behavior.
Important note on bundled runtimes
Current WHD installs include bundled JDK and Node.js runtimes. Legacy whd.conf-based runtime replacement procedures are not applicable to current versions. If runtime customization is required, keep the same supported major versions and validate fully in non-production first.