diff --git a/content/docs/administration/self-hosting/components/api.md b/content/docs/administration/self-hosting/components/api.md
index e215b5d70e98..325cd2408aa9 100644
--- a/content/docs/administration/self-hosting/components/api.md
+++ b/content/docs/administration/self-hosting/components/api.md
@@ -75,6 +75,7 @@ between the API and the database. The API also supports [exporting OpenTelemetry
 | PULUMI_DATABASE_NAME     | The name of the database on the database server.                                                                                             |
 | PULUMI_API_DOMAIN        | The internet or network-local domain using which the API service can be reached, e.g. `pulumiapi.acmecorp.com`. Default is `localhost:8080`. |
 | PULUMI_CONSOLE_DOMAIN    | The internet or network-local domain using which the Console can be reached, e.g. `pulumiconsole.acmecorp.com`. Default is `localhost:3000`. |
+| PULUMI_TFE_DOMAIN        | (Optional) The domain for the TFE-compatible state backend API, e.g. `tfe.acmecorp.com`. When set, the service exposes a Terraform/OpenTofu-compatible state API on this domain at `/api/v2`. When unset, the TFE-compatible API is disabled. Requires a DNS record pointing this domain at the same load balancer as the API. |
 | PULUMI_ENGINE_EVENTS_SCHEMA_V2 | Set this environment variable to `true` for fresh installs. **If you have an existing installation and the environment variable is currently not set or set to `false`, contact [Pulumi support](/support/) before setting it to `true`.** |
 | PULUMI_ENGINE_EVENTS_LEGACY_WRITE | Set this environment variable to `false` for fresh installs. **If you have an existing installation and the environment variable is currently not set or set to `true` in your installation, contact [Pulumi support](/support/) before setting it to `false`.** |
 
diff --git a/content/docs/administration/self-hosting/operations/networking.md b/content/docs/administration/self-hosting/operations/networking.md
index 668eb327d6bc..0a470f5d7d02 100644
--- a/content/docs/administration/self-hosting/operations/networking.md
+++ b/content/docs/administration/self-hosting/operations/networking.md
@@ -68,7 +68,8 @@ When scaling in or deploying updates, ensure containers have time to finish in-f
 
 ## DNS
 
-Configure two DNS records pointing to your load balancer:
+Configure DNS records pointing to your load balancer:
 
 - `api.{domain}` - for CLI and API access
 - `app.{domain}` - for web console access
+- `tfe.{domain}` - (optional) for the TFE-compatible state backend API, required only if [`PULUMI_TFE_DOMAIN`](/docs/administration/self-hosting/components/api/#environment-variables-for-core-infrastructure) is set