<titledata-rh="true">Self-Hosting Guide for Linux | Zrok</title><metadata-rh="true"name="viewport"content="width=device-width,initial-scale=1"><metadata-rh="true"name="twitter:card"content="summary_large_image"><metadata-rh="true"property="og:url"content="https://docs.zrok.io/docs/guides/self-hosting/linux/"><metadata-rh="true"property="og:locale"content="en"><metadata-rh="true"name="docusaurus_locale"content="en"><metadata-rh="true"name="docsearch:language"content="en"><metadata-rh="true"name="docusaurus_version"content="current"><metadata-rh="true"name="docusaurus_tag"content="docs-default-current"><metadata-rh="true"name="docsearch:version"content="current"><metadata-rh="true"name="docsearch:docusaurus_tag"content="docs-default-current"><metadata-rh="true"property="og:title"content="Self-Hosting Guide for Linux | Zrok"><metadata-rh="true"name="description"content="Walkthrough Video"><metadata-rh="true"property="og:description"content="Walkthrough Video"><linkdata-rh="true"rel="icon"href="/img/space-ziggy.png"><linkdata-rh="true"rel="canonical"href="https://docs.zrok.io/docs/guides/self-hosting/linux/"><linkdata-rh="true"rel="alternate"href="https://docs.zrok.io/docs/guides/self-hosting/linux/"hreflang="en"><linkdata-rh="true"rel="alternate"href="https://docs.zrok.io/docs/guides/self-hosting/linux/"hreflang="x-default"><linkdata-rh="true"rel="preconnect"href="https://CO73R59OLO-dsn.algolia.net"crossorigin="anonymous"><linkrel="preconnect"href="https://www.googletagmanager.com">
<iframewidth="100%"height="315"src="https://www.youtube.com/embed/870A5dke_u4"title="YouTube video player"frameborder="0"allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"></iframe>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="before-you-begin">Before you Begin<ahref="#before-you-begin"class="hash-link"aria-label="Direct link to Before you Begin"title="Direct link to Before you Begin"></a></h2>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="openziti">OpenZiti<ahref="#openziti"class="hash-link"aria-label="Direct link to OpenZiti"title="Direct link to OpenZiti"></a></h2>
<p>OpenZiti (a.k.a. "Ziti") provides secure network backhaul for <code>zrok</code> public and private shares. You need a Ziti Controller and a Ziti Router. You can run everything on the same Linux VPS.</p>
<ol>
<li>
<p>Install the Ziti Controller package by following the <ahref="https://openziti.io/docs/category/deployments"target="_blank"rel="noopener noreferrer">Linux controller deployment guide</a>.</p>
</li>
<li>
<p>Ensure your answer file (<code>/opt/openziti/etc/controller/bootstrap.env</code>) has the FQDN of your Linux server and an admin password defined.</p>
</li>
<li>
<p>Ensure your firewall allows the controller port from the answer file.</p>
</li>
<li>
<p>Start the controller service (<code>ziti-controller.service</code>) and check the status.</p>
<p>Install the Ziti Router package by following <ahref="https://openziti.io/docs/category/deployments"target="_blank"rel="noopener noreferrer">the Linux router deployment guide</a>.</p>
</li>
<li>
<p>Ensure your answer file (<code>/opt/openziti/etc/router/bootstrap.env</code>) has the FQDN of your Linux server for both controller and router addresses and the enrollment token from the previous step.</p>
</li>
<li>
<p>Ensure your firewall allows the router port from the answer file.</p>
</li>
<li>
<p>Start the router service (<code>ziti-router.service</code>) and check the status.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="install-zrok">Install zrok<ahref="#install-zrok"class="hash-link"aria-label="Direct link to Install zrok"title="Direct link to Install zrok"></a></h2>
<p>Follow <ahref="/docs/guides/install/linux/">the Linux installation guide</a> to install the <code>zrok</code> package from the repository or manually install the binary for your platform.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="configure-the-controller">Configure the Controller<ahref="#configure-the-controller"class="hash-link"aria-label="Direct link to Configure the Controller"title="Direct link to Configure the Controller"></a></h2>
<p>Create a <code>zrok</code> controller configuration file in <code>etc/ctrl.yml</code>. The controller can terminate TLS or you may front the server with a reverse proxy that continually renews the necessary wildcard certificate (e.g., Caddy w/ a DNS provider plugin). This example will expose the non-TLS listener for the controller.</p>
<p>The <code>admin</code> section defines privileged administrative credentials and must be set in the <code>ZROK_ADMIN_TOKEN</code> environment variable in shells where you want to run <code>zrok admin</code>.</p>
<p>The <code>endpoint</code> section defines where your <code>zrok</code> controller will listen.</p>
<p>The <code>store</code> section defines the local <code>sqlite3</code> database used by the controller.</p>
<p>The <code>ziti</code> section defines how the <code>zrok</code> controller should communicate with your OpenZiti installation. When using the OpenZiti quickstart, an administrative password will be generated; the <code>password</code> in the <code>ziti</code> stanza should reflect this password.</p>
<divclass="theme-admonition theme-admonition-note admonition_xJq3 alert alert--secondary"><divclass="admonitionHeading_Gvgb"><spanclass="admonitionIcon_Rf37"><svgviewBox="0 0 14 16"><pathfill-rule="evenodd"d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><divclass="admonitionContent_BuS1"><p>Be sure to see the <atarget="_blank"href="/assets/files/ctrl-6c22ae02cafe307b82e5a1f783497950.yml/">reference configuration at <code>etc/ctrl.yml</code></a> for the complete documentation of the current configuration file format for the <code>zrok</code> controller and service instance components.</p><p>See the separate guides on <ahref="/docs/guides/self-hosting/metrics-and-limits/configuring-metrics/">configuring metrics</a> and <ahref="/docs/guides/self-hosting/metrics-and-limits/configuring-limits/">configuring limits</a> for details about both of these specialized areas of service instance configuration.</p></div></div>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="environment-variables">Environment Variables<ahref="#environment-variables"class="hash-link"aria-label="Direct link to Environment Variables"title="Direct link to Environment Variables"></a></h2>
<p>The <code>zrok</code> binaries are configured to work with the global <code>zrok.io</code> service, and default to using <code>api.zrok.io</code> as the endpoint for communicating with the service.</p>
<p>To work with a self-hosted <code>zrok</code> deployment, you'll need to set the <code>ZROK_API_ENDPOINT</code> environment variable to point to the address where your <code>zrok</code> controller will be listening, according to <code>endpoint</code> in the configuration file above.</p>
<p><ahref="/docs/guides/self-hosting/instance-configuration/">Read more about configuring your self-hosted <code>zrok</code> instance</a>.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="bootstrap-openziti-for-zrok">Bootstrap OpenZiti for zrok<ahref="#bootstrap-openziti-for-zrok"class="hash-link"aria-label="Direct link to Bootstrap OpenZiti for zrok"title="Direct link to Bootstrap OpenZiti for zrok"></a></h2>
<p>With your OpenZiti network running and your configuration saved to a local file (I refer to mine as <code>etc/ctrl.yml</code> in these examples), you're ready to bootstrap the Ziti network.</p>
<p>Use the <code>zrok admin bootstrap</code> command to bootstrap like this:</p>
<divclass="language-bash codeBlockContainer_Ckt0 theme-code-block"style="--prism-color:#F8F8F2;--prism-background-color:#282A36"><divclass="codeBlockContent_biex"><pretabindex="0"class="prism-code language-bash codeBlock_bY9V thin-scrollbar"style="color:#F8F8F2;background-color:#282A36"><codeclass="codeBlockLines_e6Vv"><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">$ zrok admin bootstrap etc/ctrl.yml</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.002] INFO main.(*adminBootstrap).run: {</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain"> ...</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">}</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.002] INFO zrok/controller/store.Open: database connected</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.006] INFO zrok/controller/store.(*Store).migrate: applied 0 migrations</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.006] INFO zrok/controller.Bootstrap: connecting to the ziti edge management api</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.039] INFO zrok/controller.Bootstrap: creating identity for controller ziti access</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.071] INFO zrok/controller.Bootstrap: controller identity: jKd8AINSz</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.082] INFO zrok/controller.assertIdentity: asserted identity 'jKd8AINSz'</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.085] INFO zrok/controller.assertErpForIdentity: asserted erps for 'ctrl' (jKd8AINSz)</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.085] INFO zrok/controller.Bootstrap: creating identity for frontend ziti access</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.118] INFO zrok/controller.Bootstrap: frontend identity: sqJRAINSiB</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.119] INFO zrok/controller.assertIdentity: asserted identity 'sqJRAINSiB'</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.120] INFO zrok/controller.assertErpForIdentity: asserted erps for 'frontend' (sqJRAINSiB)</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.120] WARNING zrok/controller.Bootstrap: missing public frontend for ziti id 'sqJRAINSiB'; please use 'zrok admin create frontend sqJRAINSiB public https://{token}.your.dns.name' to create a frontend instance</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.123] INFO zrok/controller.assertZrokProxyConfigType: found 'zrok.proxy.v1' config type with id '33CyjNbIepkXHN5VzGDA8L'</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.124] INFO zrok/controller.assertMetricsService: creating 'metrics' service</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.126] INFO zrok/controller.assertMetricsService: asserted 'metrics' service (5RpPZZ7T8bZf1ENjwGiPc3)</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.128] INFO zrok/controller.assertMetricsSerp: creating 'metrics' serp</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.130] INFO zrok/controller.assertMetricsSerp: asserted 'metrics' serp</span><br></span><spanclass="token-line"style="color:#F8F8F2"><s
<p>The <code>zrok admin bootstrap</code> command configures the <code>zrok</code> database, the necessary OpenZiti identities, and all of the OpenZiti policies required to run a <code>zrok</code> service.</p>
<p>Notice this warning:</p>
<divclass="codeBlockContainer_Ckt0 theme-code-block"style="--prism-color:#F8F8F2;--prism-background-color:#282A36"><divclass="codeBlockContent_biex"><pretabindex="0"class="prism-code language-text codeBlock_bY9V thin-scrollbar"style="color:#F8F8F2;background-color:#282A36"><codeclass="codeBlockLines_e6Vv"><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.120] WARNING zrok/controller.Bootstrap: missing public frontend for ziti id 'sqJRAINSiB'; please use 'zrok admin create frontend sqJRAINSiB public https://{token}.your.dns.name' to create a frontend instance</span><br></span></code></pre><divclass="buttonGroup__atx"><buttontype="button"aria-label="Copy code to clipboard"title="Copy"class="clean-btn"><spanclass="copyButtonIcons_eSgA"aria-hidden="true"><svgviewBox="0 0 24 24"class="copyButtonIcon_y97N"><pathfill="currentColor"d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svgviewBox="0 0 24 24"class="copyButtonSuccessIcon_LjdS"><pathfill="currentColor"d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div>
<p>If you find it necessary to re-run the <code>zrok admin bootstrap</code> command, you may need to add the <code>--skip-frontend</code> flag to avoid re-creating the default <code>public</code> frontend's Ziti identity and router policy.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="run-zrok-controller">Run zrok Controller<ahref="#run-zrok-controller"class="hash-link"aria-label="Direct link to Run zrok Controller"title="Direct link to Run zrok Controller"></a></h2>
<p>The <code>zrok</code> bootstrap process wants us to create a "public frontend" for our service. <code>zrok</code> uses public frontends to allow users to specify where they would like public traffic to ingress from.</p>
<p>The <code>zrok admin create frontend</code> command requires a running <code>zrok</code> controller, so let's start that up first:</p>
<divclass="language-bash codeBlockContainer_Ckt0 theme-code-block"style="--prism-color:#F8F8F2;--prism-background-color:#282A36"><divclass="codeBlockContent_biex"><pretabindex="0"class="prism-code language-bash codeBlock_bY9V thin-scrollbar"style="color:#F8F8F2;background-color:#282A36"><codeclass="codeBlockLines_e6Vv"><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">$ zrok controller etc/ctrl.yml </span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.003] INFO main.(*controllerCommand).run: {</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain"> ...</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">}</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.016] INFO zrok/controller.inspectZiti: inspecting ziti controller configuration</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.048] INFO zrok/controller.findZrokProxyConfigType: found 'zrok.proxy.v1' config type with id '33CyjNbIepkXHN5VzGDA8L'</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.048] INFO zrok/controller/store.Open: database connected</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.048] INFO zrok/controller/store.(*Store).migrate: applied 0 migrations</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.049] INFO zrok/controller.(*metricsAgent).run: starting</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.064] INFO zrok/rest_server_zrok.setupGlobalMiddleware: configuring</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.064] INFO zrok/ui.StaticBuilder: building</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.065] INFO zrok/rest_server_zrok.(*Server).Logf: Serving zrok at http://[::]:18080</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.085] INFO zrok/controller.(*metricsAgent).listen: started</span><br></span></code></pre><divclass="buttonGroup__atx"><buttontype="button"aria-label="Copy code to clipboard"title="Copy"class="clean-btn"><spanclass="copyButtonIcons_eSgA"aria-hidden="true"><svgviewBox="0 0 24 24"class="copyButtonIcon_y97N"><pathfill="currentColor"d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svgviewBox="0 0 24 24"class="copyButtonSuccessIcon_LjdS"><pathfill="currentColor"d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="create-zrok-frontend">Create zrok Frontend<ahref="#create-zrok-frontend"class="hash-link"aria-label="Direct link to Create zrok Frontend"title="Direct link to Create zrok Frontend"></a></h2>
<p>With our <code>ZROK_ADMIN_TOKEN</code> and <code>ZROK_API_ENDPOINT</code> environment variables set, we can create our public frontend like this:</p>
<divclass="language-bash codeBlockContainer_Ckt0 theme-code-block"style="--prism-color:#F8F8F2;--prism-background-color:#282A36"><divclass="codeBlockContent_biex"><pretabindex="0"class="prism-code language-bash codeBlock_bY9V thin-scrollbar"style="color:#F8F8F2;background-color:#282A36"><codeclass="codeBlockLines_e6Vv"><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">$ zrok admin create frontend sqJRAINSiB public http://{token}.zrok.quigley.com:8080</span><br></span><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 0.037] INFO main.(*adminCreateFrontendCommand).run: created global public frontend 'WEirJNHVlcW9'</span><br></span></code></pre><divclass="buttonGroup__atx"><buttontype="button"aria-label="Copy code to clipboard"title="Copy"class="clean-btn"><spanclass="copyButtonIcons_eSgA"aria-hidden="true"><svgviewBox="0 0 24 24"class="copyButtonIcon_y97N"><pathfill="currentColor"d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svgviewBox="0 0 24 24"class="copyButtonSuccessIcon_LjdS"><pathfill="currentColor"d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div>
<p>The id of the frontend was emitted earlier in by the <code>zrok</code> controller when we ran the bootstrap command. If you don't have that log message the you can find the id again with the <code>ziti</code> CLI like this:</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="configure-the-public-frontend">Configure the Public Frontend<ahref="#configure-the-public-frontend"class="hash-link"aria-label="Direct link to Configure the Public Frontend"title="Direct link to Configure the Public Frontend"></a></h2>
<p>Create an http frontend configuration file in <code>etc/http-frontend.yml</code>.</p>
<p>This frontend config file has a <code>host_match</code> pattern that represents the DNS zone you're using with this instance of <code>zrok</code>. Incoming HTTP requests with a matching <code>Host</code> header will be handled by this frontend. You may also specify the interface address where the frontend will listen for public access requests.</p>
<p>The frontend does not provide server TLS, but you may front the server with a reverse proxy. It is essential the reverse proxy forwards the <code>Host</code> header supplied by the viewer. This example will expose the non-TLS listener for the frontend.</p>
<p>You can also specify an <code>oauth</code> configuration in this file, full details of are found in <ahref="/docs/guides/self-hosting/oauth/configuring-oauth/#configuring-your-public-frontend">OAuth Public Frontend Configuration</a>.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="start-public-frontend">Start Public Frontend<ahref="#start-public-frontend"class="hash-link"aria-label="Direct link to Start Public Frontend"title="Direct link to Start Public Frontend"></a></h2>
<p>The <code>zrok</code> frontend uses the <code>public</code> identity created during the bootstrap process to securely access zrok backends. to provide public access for the <code>zrok</code> deployment. It is expected that the configured listener for this frontend corresponds to the DNS template specified when creating the public frontend record above.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="create-a-user-account">Create a User Account<ahref="#create-a-user-account"class="hash-link"aria-label="Direct link to Create a User Account"title="Direct link to Create a User Account"></a></h2>
<p>With our <code>ZROK_ADMIN_TOKEN</code> and <code>ZROK_API_ENDPOINT</code> environment variables set, we can create our first user account.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="invite-additional-users">Invite Additional Users<ahref="#invite-additional-users"class="hash-link"aria-label="Direct link to Invite Additional Users"title="Direct link to Invite Additional Users"></a></h2>
<p>Offer this onboarding method to your users if you have configured an email-sending service in your <code>zrok</code> controller configuration.</p>
<p>The UI will ask you to set a password for your new account. Go ahead and do that.</p>
<p>After doing that, I see the following output in my controller console:</p>
<divclass="codeBlockContainer_Ckt0 theme-code-block"style="--prism-color:#F8F8F2;--prism-background-color:#282A36"><divclass="codeBlockContent_biex"><pretabindex="0"class="prism-code language-text codeBlock_bY9V thin-scrollbar"style="color:#F8F8F2;background-color:#282A36"><codeclass="codeBlockLines_e6Vv"><spanclass="token-line"style="color:#F8F8F2"><spanclass="token plain">[ 516.778] INFO zrok/controller.(*registerHandler).Handle: created account 'user@domain.com' with token 'SuGzRPjVDIcF'</span><br></span></code></pre><divclass="buttonGroup__atx"><buttontype="button"aria-label="Copy code to clipboard"title="Copy"class="clean-btn"><spanclass="copyButtonIcons_eSgA"aria-hidden="true"><svgviewBox="0 0 24 24"class="copyButtonIcon_y97N"><pathfill="currentColor"d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svgviewBox="0 0 24 24"class="copyButtonSuccessIcon_LjdS"><pathfill="currentColor"d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div>
<p>Keep track of the token listed above (<code>SuGzRPjVDIcF</code>). We'll use this to enable our shell for this <code>zrok</code> deployment.</p>
<h2class="anchor anchorWithStickyNavbar_LWe7"id="enable-your-environment">Enable Your Environment<ahref="#enable-your-environment"class="hash-link"aria-label="Direct link to Enable Your Environment"title="Direct link to Enable Your Environment"></a></h2>
<p>On another device that can reach your Linux server by FQDN, configure the API endpoint and enable the environment with the account token you received when you created the first user account.</p>
