diff --git a/internal/config/flags.go b/internal/config/flags.go
index 64195c53d..4fd246fbb 100644
--- a/internal/config/flags.go
+++ b/internal/config/flags.go
@@ -209,6 +209,11 @@ var Flags = CliFlags{
 			Usage:  "enable experimental features",
 			EnvVar: "PHOTOPRISM_EXPERIMENTAL",
 		}}, {
+		Flag: cli.BoolFlag{
+			Name:   "disable-tls",
+			Usage:  "disable HTTPS even if a certificate is available",
+			EnvVar: "PHOTOPRISM_DISABLE_TLS",
+		}}, {
 		Flag: cli.BoolFlag{
 			Name:   "disable-webdav",
 			Usage:  "disable built-in WebDAV server",
diff --git a/internal/config/report.go b/internal/config/report.go
index 678da3435..834683d23 100644
--- a/internal/config/report.go
+++ b/internal/config/report.go
@@ -72,6 +72,7 @@ func (c *Config) Report() (rows [][]string, cols []string) {
 		// Feature Flags.
 		{"read-only", fmt.Sprintf("%t", c.ReadOnly())},
 		{"experimental", fmt.Sprintf("%t", c.Experimental())},
+		{"disable-tls", fmt.Sprintf("%t", c.DisableTLS())},
 		{"disable-webdav", fmt.Sprintf("%t", c.DisableWebDAV())},
 		{"disable-settings", fmt.Sprintf("%t", c.DisableSettings())},
 		{"disable-places", fmt.Sprintf("%t", c.DisablePlaces())},
@@ -139,7 +140,6 @@ func (c *Config) Report() (rows [][]string, cols []string) {
 		{"tls-email", c.TLSEmail()},
 		{"tls-cert", c.TLSCert()},
 		{"tls-key", c.TLSKey()},
-		{"disable-tls", fmt.Sprintf("%t", c.DisableTLS())},
 
 		// Database.
 		{"database-driver", c.DatabaseDriver()},