diff --git a/services/terraform/remote/service_tunnelbroker.tf b/services/terraform/remote/service_tunnelbroker.tf
--- a/services/terraform/remote/service_tunnelbroker.tf
+++ b/services/terraform/remote/service_tunnelbroker.tf
@@ -19,8 +19,9 @@
   tunnelbroker_docker_image = "${local.tunnelbroker_config.docker_image}:${local.tunnelbroker_config.docker_tag}"
   rabbitmq_password         = local.secrets.amqpPassword[local.environment]
 
-  apns_config_secret_name = "tunnelbroker/APNsConfig"
-  fcm_config_secret_name  = "tunnelbroker/FCMConfig"
+  apns_config_secret_name     = "tunnelbroker/APNsConfig"
+  fcm_config_secret_name      = "tunnelbroker/FCMConfig"
+  web_push_config_secret_name = "tunnelbroker/WebPushConfig"
 }
 
 data "aws_secretsmanager_secret" "tunnelbroker_apns" {
@@ -31,6 +32,10 @@
   name = local.fcm_config_secret_name
 }
 
+data "aws_secretsmanager_secret" "tunnelbroker_web_push" {
+  name = local.web_push_config_secret_name
+}
+
 # RabbitMQ
 resource "aws_mq_broker" "tunnelbroker_rabbitmq" {
   broker_name = "tunnelbroker-rabbitmq"
@@ -106,6 +111,10 @@
         {
           name      = "FCM_CONFIG"
           valueFrom = data.aws_secretsmanager_secret.tunnelbroker_fcm.arn
+        },
+        {
+          name      = "WEB_PUSH_CONFIG"
+          valueFrom = data.aws_secretsmanager_secret.tunnelbroker_web_push.arn
         }
       ]
       logConfiguration = {
diff --git a/services/tunnelbroker/src/constants.rs b/services/tunnelbroker/src/constants.rs
--- a/services/tunnelbroker/src/constants.rs
+++ b/services/tunnelbroker/src/constants.rs
@@ -13,6 +13,8 @@
 pub const RMQ_CONSUMER_TAG: &str = "tunnelbroker";
 pub const ENV_APNS_CONFIG: &str = "APNS_CONFIG";
 pub const ENV_FCM_CONFIG: &str = "FCM_CONFIG";
+pub const ENV_WEB_PUSH_CONFIG: &str = "WEB_PUSH_CONFIG";
+
 pub const LOG_LEVEL_ENV_VAR: &str =
   tracing_subscriber::filter::EnvFilter::DEFAULT_ENV;
 pub const FCM_ACCESS_TOKEN_GENERATION_THRESHOLD: u64 = 5 * 60;