# Bitwarden credentials (machine-to-machine auth)
BW_CLIENTID=
BW_CLIENTSECRET=
BW_PASSWORD=

# Self-hosted Bitwarden/Vaultwarden server URL
BW_SERVER=https://pwvault.turnsys.com

# TOTP secret for the BW account's own 2FA (optional — API key auth
# does not require TOTP; kept for backwards compatibility)
BW_TOTP_SECRET=

# Set to true for debugging (shows browser window — requires display)
HEADFUL=false