Environment variables

Server (`tyr-server`)

Variable	Default	Required	Description
`DATABASE_URL`	—	yes	PostgreSQL connection URL
`TYR_WEB_DIR`	`/usr/share/tyr/web`	no	Path to built Svelte UI static files
`TYR_REST_NO_TLS`	`false`	no	Serve REST in plaintext (behind a terminating proxy)
`TYR_REST_BIND`	`0.0.0.0:7701`	no	REST bind address
`TYR_GRPC_BIND`	`0.0.0.0:7700`	no	gRPC bind address
`TYR_DATA_DIR`	`/var/lib/tyr`	no	Where CA key and state live
`TYR_BOOTSTRAP_ENROLLMENT_TOKEN`	—	no	Pre-seed an enrollment token (used by the quickstart compose)
`RUST_LOG`	`info`	no	Log level (`error` / `warn` / `info` / `debug` / `trace`)

Variable	Default	Required	Description
`TYR_SERVER`	—	yes*	gRPC URL (`http://…:7700` or `https://…:7700`). Can also be `--server`.
`TYR_AGENT_NAME`	hostname	no	Human label. Can also be `--name`.
`TYR_ENROLLMENT_TOKEN`	—	yes (first boot)	Bootstrap token
`RUST_LOG`	`info`	no	Log level

*Required if not provided via --server.

Variable	Default	Description
`TYR_SERVER`	`https://localhost:7701`	Default REST endpoint

CLI auth token is stored at ~/.config/tyr/token — not environment-driven.

The shipped docker-compose.yml uses these. Override by editing the file or passing -e:

docker compose run --rm -e RUST_LOG=debug tyr-server

CLI flag > config file > environment variable > default.

The only exception is TYR_BOOTSTRAP_ENROLLMENT_TOKEN on the server — there’s no CLI flag or config file equivalent; it’s env-only.