diff --git a/antd-config.ini b/antd-config.ini
index ede3ae9..84fdf2d 100644
--- a/antd-config.ini
+++ b/antd-config.ini
@@ -55,3 +55,4 @@ socket = unix:/tmp/fcgi.sock
 [PLUGIN:tunnel]
 autoload = 1
 name = tunnel
+hotlines = unix:/opt/www/tmp/antd_hotline.sock
diff --git a/runner.ini b/runner.ini
index b058e2b..f0b313a 100644
--- a/runner.ini
+++ b/runner.ini
@@ -1,4 +1,13 @@
 [vterm]
 exec = /opt/www/bin/vterm
 param = /app/data/tmp/channels/antd_hotline.sock
-debug = 0
\ No newline at end of file
+debug = 0
+
+# used only by tunnel to authentificate user
+[tunnel_keychain]
+exec = /opt/www/bin/wfifo
+param = unix:/opt/www/tmp/antd_hotline.sock
+param = keychain
+param = /opt/www/tmp/antunnel_keychain
+param = r
+debug = 1
\ No newline at end of file