diff --git a/ansible/group_vars/all b/ansible/group_vars/all
index af6ef8306d7e4ca8f0ec7bb776764f9466fa1b5a..89b2168e3677fcedcd4161ac234948f55416cb01 100644
--- a/ansible/group_vars/all
+++ b/ansible/group_vars/all
@@ -93,4 +93,5 @@
 # ood_config
   ood_internal_ip: 10.141.0.133
   ood_hostname: ood-gpfs5-01
+  ood_domain: https://rc.uab.edu
   login_hostname: login-gpfs5-01
diff --git a/ansible/roles/ood_config/tasks/main.yml b/ansible/roles/ood_config/tasks/main.yml
index cb9c4ef4f3fd7d55c522723a5135cb46c05a052f..c020e50f86babd7e1628e6f2aa5397d9cd1e3c2f 100644
--- a/ansible/roles/ood_config/tasks/main.yml
+++ b/ansible/roles/ood_config/tasks/main.yml
@@ -9,6 +9,11 @@
     url: https://s3.lts.rc.uab.edu/ood-proxy-file/ood-proxy.conf
     dest: /var/www/ood/apps/sys/shell/app.js 
 
+- name: Shell app configuration env
+  ansible.builtin.template:
+    src: shell_app.env.j2
+    dest: /etc/ood/config/apps/shell/env
+
 - name: Point shell app to login node
   ansible.builtin.replace:
     path: /etc/ood/config/clusters.d/SLURM_CLUSTER.yml
diff --git a/ansible/roles/ood_config/templates/shell_app.env.j2 b/ansible/roles/ood_config/templates/shell_app.env.j2
new file mode 100644
index 0000000000000000000000000000000000000000..b078fe82172cc83a38a5bbef882fa7c73fb5b3b3
--- /dev/null
+++ b/ansible/roles/ood_config/templates/shell_app.env.j2
@@ -0,0 +1 @@
+OOD_SHELL_ORIGIN_CHECK='{{ ood_domain }}'