MongoDB SSL Certificate Setup (Meteor)

Download the SSL Certificate

Open the Galaxy dashboard and navigate to your MongoDB cluster's Overview page. You'll find a download link for the SSL certificate there.

Download the certificate file. You'll add it to your Meteor project in the next step.

Add the Certificate to Your Project

Create a private folder in the root of your Meteor project (if you don't already have one). Drop the downloaded certificate file inside it.

For this guide, we'll assume the file is named certificate.pem. Your project structure should look like this:

your-meteor-app/
├── private/
│   ├── certificate.pem
│   └── settings.json  (recommended location)
├── client/
├── server/
└── ...

Configure Your Settings

Open (or create) your settings.json file and add the SSL configuration along with your MongoDB connection string:

{
  "packages": {
    "mongo": {
      "options": {
        "tls": true,
        "tlsCAFileAsset": "certificate.pem"
      }
    }
  },
  "galaxy.meteor.com": {
    "env": {
      "MONGO_URL": "mongodb://user:password@host1:27017,host2:27017,host3:27017/yourdb?replicaSet=yourReplicaSet&ssl=true&authSource=admin"
    }
  }
}

Two key settings here:

tlsCAFileAsset: Tells Meteor to look for the SSL certificate inside the private folder. You only need the filename, not the full path.

MONGO_URL: Your MongoDB connection string. Make sure it includes ssl=true and authSource=admin as query parameters. You'll find the full connection string on your Galaxy Database cluster's Credentials section.

Deploy Your App

Deploy with the --settings flag pointing to your settings file:

meteor deploy yourapp.meteorapp.com --settings private/settings.json

That's it. Meteor reads the certificate from private/, establishes the SSL connection, and your data travels encrypted between your app and MongoDB.