tlsDirectory property
A directory holding fullchain.pem + privkey.pem (LetsEncrypt layout)
for the main wss listener. When set, the Hub loads the certificate at
start and re-checks the files every tlsReloadInterval; on renewal it
re-binds the listener with the fresh context so the new certificate is
served without a restart (briefly running both listeners on the same port
while existing connections drain). Mutually exclusive with
securityContext.
Implementation
final String? tlsDirectory;