diff --git a/src/KurrentDB.Core/ClusterVNode.cs b/src/KurrentDB.Core/ClusterVNode.cs
index f3990dbe6c9..4ad8e9f9084 100644
--- a/src/KurrentDB.Core/ClusterVNode.cs
+++ b/src/KurrentDB.Core/ClusterVNode.cs
@@ -288,9 +288,9 @@ public ClusterVNode(ClusterVNodeOptions options,
 		OptionsFormatter.LogConfig("Archive", archiveOptions);
 		archiveOptions.Validate();
 
-		var disableInternalTcpTls = options.Application.Insecure;
-		var disableExternalTcpTls = options.Application.Insecure;
 		var nodeTcpOptions = GetOptions<NodeTcpOptions>("TcpPlugin");
+		var disableInternalTcpTls = options.Application.Insecure;
+		var disableExternalTcpTls = options.Application.Insecure || nodeTcpOptions.DisableExternalTcpTls;
 		var enableExternalTcp = nodeTcpOptions.EnableExternalTcp;
 
 		var httpEndPoint = new IPEndPoint(options.Interface.NodeIp, options.Interface.NodePort);
diff --git a/src/KurrentDB.Core/NodeTcpOptions.cs b/src/KurrentDB.Core/NodeTcpOptions.cs
index 6383d84ccae..d26d818fa05 100644
--- a/src/KurrentDB.Core/NodeTcpOptions.cs
+++ b/src/KurrentDB.Core/NodeTcpOptions.cs
@@ -7,5 +7,6 @@ namespace KurrentDB.Core;
 public class NodeTcpOptions {
 	public int NodeTcpPort { get; init; } = 1113;
 	public bool EnableExternalTcp { get; init; }
+	public bool DisableExternalTcpTls { get; init; }
 	public int? NodeTcpPortAdvertiseAs { get; init; }
 }