Borrowing it
Nothing to install: this file belongs to lsampaioweb/ai-instructions. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/lsampaioweb/ai-instructions/main/.github/instructions/spring-boot-tls.instructions.mdgit clone --depth 1 https://github.com/lsampaioweb/ai-instructionsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/lsampaioweb/ai-instructions/spring-boot-tls)<a href="https://agentmods.dev/instructions/lsampaioweb/ai-instructions/spring-boot-tls"><img src="https://agentmods.dev/badge/instructions/lsampaioweb/ai-instructions/spring-boot-tls/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/lsampaioweb/ai-instructions/spring-boot-tls"><img src="https://agentmods.dev/badge/instructions/lsampaioweb/ai-instructions/spring-boot-tls.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00783 | $0.00783 |
| Opus 5.5 | $0.00313 | $0.00313 |
| Sonnet 5.5 | $0.00157 | $0.00157 |
| Haiku 4.5 | $0.00078 | $0.00078 |
Grade A, and why
ai-instructions spring-boot-tls.instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spring Boot HTTPS and TLS Contract
These rules apply when an application terminates HTTPS itself or defines TLS-related runtime settings. They do not require embedded TLS when a trusted reverse proxy or ingress terminates TLS before traffic reaches the application.
Ownership
- Defer general YAML structure, profiles, environment variables, and secret handling
to
spring-boot-config.instructions.md. - Defer certificate and keystore ignore patterns to
spring-boot-gitignore.instructions.md. - Defer endpoint authorization and anonymous-access rules to
spring-boot-security.instructions.md. - Defer human-facing setup and certificate instructions to
spring-boot-readme.instructions.md. - Keep proxy-specific TLS termination, routing, and middleware rules in the deployment or proxy contract that owns them.
Embedded TLS
- Enable
server.ssl.enabledonly when the Spring Boot application terminates TLS. - Use a PKCS12 keystore for embedded HTTPS unless an explicit compatibility requirement requires another supported store type.
- Supply the keystore password through an environment variable or external secret source.
- Keep the keystore path, store type, enabled protocols, and HTTPS port in environment-appropriate configuration.
- Enable TLS 1.3 as the minimum protocol baseline unless a documented client compatibility requirement requires a different supported protocol set.
- Enable HTTP/2 only when the deployment and clients support it; do not add it merely because HTTPS is enabled.
- Keep development and production TLS settings in their matching profile files when the settings differ by environment.
- Use a truststore only when the application must validate client certificates or outbound peer certificates. Do not add mutual TLS by default.
- Make the TLS termination boundary explicit when a reverse proxy, ingress, or service mesh terminates HTTPS before the application.
Certificate material
- Keep private keys, keystores, truststores, and certificate passwords outside source control.
- Load certificate passwords and externally managed certificate paths from the environment or an approved secret source.
- Use local-only development certificates only when they are clearly isolated from production material.
- Document the required certificate, keystore, and truststore inputs without including private material or real passwords.
- Do not copy certificate material into Docker images or committed application resources.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 80 lines · 783 tokens per session scan A 8e3073b7269a
ai-instructions spring-boot-tls.instructions.md is an instructions file published in the GitHub repository lsampaioweb/ai-instructions (1 stars, last pushed 5d ago), licensed MIT. It adds 783 tokens to every session, about $0.0031 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-30.
ai-instructions spring-boot-tls.instructions.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| ai-instructions spring-boot-tls.instructions.mdlsampaioweb/ai-instructions | Instructions file | 1 | 5d ago | MIT | A | 783 | GitHub Copilot |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |