---
title: Environment Variables
url: https://www.tines.com/stories/docs/admin/command-over-http/environment-variables/
updated: 2025-04-29T15:07:39+00:00
---

*[tines.com](https://www.tines.com/llms.txt) › [Docs](https://www.tines.com/stories/docs/llms.txt) › [Admin](https://www.tines.com/llm/stories/docs/admin.md) › [Command-over-HTTP](https://www.tines.com/llm/stories/docs/admin/command-over-http.md)*

# Environment Variables

*[View on tines.com](https://www.tines.com/stories/docs/admin/command-over-http/environment-variables/)*

This application is configured via ENV variables. Configuration relates to two services: HTTP server application and cloudflared tunnel.

### HTTP server application

By default HTTP server doesn't check `x-api-key` header and doesn't force HTTPS.

| **ENV Variable Name** | **Default** | **Description** |
| --- | --- | --- |
| `PORT` | 80 | Server HTTP port |
| `TLS_PORT` | 443 | Server HTTPS port |
| `FORCE_SSL` |  | Force usage of HTTPS protocol |
| `API_KEY` |  | `x-api-key` header value to check (not checked by default) |
| `TLS_CERT` |  | Raw TLS certificate |
| `TLS_CERT_PATH` | `/ssl/tls.crt` | Path to TLS certificate |
| `TLS_KEY` |  | Raw TLS key |
| `TLS_KEY_PATH` | `/ssl/tls.key` | Path to TLS key |
| `EXECUTION_TIMEOUT` | 300 | Timeout (seconds) for command execution |
| `KERBEROS_DEFAULT_REALM` | `EXAMPLE.COM` | The domain equivalent name of the Kerberos realm (all caps) |
| `KERBEROS_KDC_DOMAIN` | `kdc.example.com` | Full KDC domain name |
| `KERBEROS_ADMIN_SERVER` | `admin.example.com` | Full admin server domain name |
| `KERBEROS_PRINCIPAL_USER_NAME` | `admin` | Name of the principal for Kerberos auth |
| `KERBEROS_PRINCIPAL_USER_PASSWORD` | `PASSWORD` | Password of the principal for Kerberos auth |

### Debug

You can turn on debug logs by setting the following environment variable or passing it to docker run. Example:

```
export DEBUG="*"
```

### Cloudflared

If some of these variables are not set or proper values are not provided, the `tines-tunnel` won't work.

| ENV Variable Name | Default | Description |
| --- | --- | --- |
| `TINES_TUNNEL_SECRET` |  | Base64 encoded JSON with tines tunnel secret |
| `TUNNEL_ORIGIN_CERT` | `~/.cloudflared/cert.pem` | Cloudflared certificate |
| `TINES_TUNNEL_TO_COH_INGRESS_PORT` | 443 | The port that Command Over HTTP is running on. By default it is 443 and that is where Tunnel will forward the request, but if you are using a customer `PORT` or `TLS_PORT`, you should set `TINES_TUNNEL_TO_COH_INGRESS_PORT` accordingly. |