diff --git a/live/terragrunt.hcl b/live/terragrunt.hcl
index 500a03e..996cc75 100644
--- a/live/terragrunt.hcl
+++ b/live/terragrunt.hcl
@@ -85,7 +85,8 @@ provider "postgresql" {
 # In-cluster Kafka (Bitnami). Admin = inter_broker super-user from Vault secrets/kafka/bootstrap.
 provider "kafka" {
   bootstrap_servers = ["${get_env("KAFKA_BOOTSTRAP", "kafka-kafka-contour.kafka.svc.cluster.local:9092")}"]
-  tls_enabled       = false
+  tls_enabled       = ${get_env("KAFKA_TLS_ENABLED", "true")}
+  skip_tls_verify   = ${get_env("KAFKA_TLS_SKIP_VERIFY", "true")}
   sasl_mechanism    = "${get_env("KAFKA_SASL_MECHANISM", "plain")}"
   sasl_username     = "${get_env("KAFKA_ADMIN_USER", "inter_broker_user")}"
   sasl_password     = "${get_env("KAFKA_ADMIN_PASSWORD", "")}"