# tls

## Usage

```bash
bdy tunnel config add tls|TLS [options] <name> [host:port]
```

## Arguments

| **Argument** | **Description** |
| :--- | :--- |
| `name` | Name of the tunnel (required) |
| `host:port` | Target address to redirect traffic to. Host is optional and by default local machine. Port is by default 80 (optional) |

## Options

| **Option** | **Description** |
| :--- | :--- |
| `-r, --region <region>` | override default region ("eu", "us", "as") |
| `-w, --whitelist <cidrs...>` | Whitelist provided IP CIDRs. Use "*" to allow all |
| `-n, --name <name>` | Name of the tunnel |
| `-t, --timeout <seconds>` | Enforce connection timeout in seconds |
| `-k, --key <key>` | Path to a TLS key |
| `-c, --cert <cert>` | Path to a TLS PEM certificate |
| `--ca <ca>` | Path to a TLS PEM CA certificate for TLS auth |
| `-i, --terminate <at>` | Terminate TLS at "target", "agent", "region". By default TLS is terminated at "region" |
| `-f, --force` | Overwrite tunnel if it already exist |
| `-h, --help` | display help for command |


---
Original source: https://buddy.works/docs/cli/tunnel/config/add/tls