Environment

Operator-facing variables only. Leave unspecified variables unset. Do not put secrets in a global ~/.zshrc you then paste into logs.

Enroll and origin

Variable	When
REMOTE_ORIGIN	Default https://remote.lzinternal.ai (this project's official instance). Leave unset
REMOTE_JOIN_TOKEN	Forbidden. Setting it fails startup

Local state

Variable	Default	Notes
REMOTE_STATE_DIR	~/.config/remote	Identity, devices, logs
REMOTE_ALLOWED_ROOTS	user Home	Allowed roots for web paths. Setting it replaces Home
REMOTE_MULTI_SESSION	on	Lets the phone list and switch to named Herdr sessions (herdr --session <name>) from the Sessions header and Settings. 0 turns it off; HERDR_SOCKET_PATH set to a non-default path keeps it off unless 1 is set. Remote still starts only the default server. Notifications still come from the default session only. See Named Herdr sessions

Install

Variable	Notes
REMOTE_DOWNLOAD_BASE	Binary download root, default https://dl.remote.lzinternal.ai/daemon
REMOTE_INSTALL_PREFIX	Same as install.sh --prefix

Push

Variable	Notes
REMOTE_PUSH	Defaults to 1 (on); 0 disables
REMOTE_VAPID_SUBJECT	Optional mailto: or https: URL you control; default https://remote.lzinternal.ai

Save explicit settings with REMOTE_PUSH=0 remote service install (or 1 to enable). Reinstallation preserves existing push settings; a plain restart does not import shell variables. See Notifications.

Keep off

Variable	Why
REMOTE_HERDR_AUTOSTART	0 skips starting Herdr automatically
REMOTE_DEV_FAKE_RUNTIME	Demo data, not real Herdr
REMOTE_DEV_AUTO_ADMIT	Skips computer confirm. Outside isolated tests this hands the computer to anyone with the code