diff --git a/backend/internal/config/config.go b/backend/internal/config/config.go
index 060779a..da685e3 100644
--- a/backend/internal/config/config.go
+++ b/backend/internal/config/config.go
@@ -15,6 +15,7 @@ type Config struct {
 	JWTSecret            string
 	AccessTokenTTL       time.Duration
 	RefreshTokenTTL      time.Duration
+	GatewayBootstrapToken string
 	DefaultGatewayID     string
 	DefaultDNS           []string
 	DefaultVPNCIDR       string
@@ -32,6 +33,7 @@ func Load() Config {
 		JWTSecret:            getenv("JWT_SECRET", "change-me-in-production"),
 		AccessTokenTTL:       time.Duration(getenvInt("ACCESS_TOKEN_TTL_SECONDS", 900)) * time.Second,
 		RefreshTokenTTL:      time.Duration(getenvInt("REFRESH_TOKEN_TTL_SECONDS", 2592000)) * time.Second,
+		GatewayBootstrapToken: getenv("GATEWAY_BOOTSTRAP_TOKEN", "nexavpn-gateway-bootstrap"),
 		DefaultGatewayID:     getenv("DEFAULT_GATEWAY_ID", ""),
 		DefaultDNS:           splitCSV(getenv("DEFAULT_DNS_SERVERS", "10.20.0.53")),
 		DefaultVPNCIDR:       getenv("DEFAULT_VPN_CIDR", "100.96.0.0/24"),