# bitwarden-go machine credentials (copy to a 0600 file, e.g.
# ~/.config/bitwarden-go/env, and fill in). Values are NEVER passed as
# flags or arguments. Any *.env file in this repo is gitignored.
#
# Server root; identity endpoint is <url>/identity/connect/token and the
# API is <url>/api/... . Default when unset: https://vault.bitwarden.com
BW_SERVER_URL=https://vault.example.com

# Machine access token as printed by Bitwarden Secrets Manager
# ("0.<uuid>.<secret>:<key>"). This single value unlocks full decryption.
BW_ACCESS_TOKEN=0.00000000-0000-4000-8000-000000000000.replace-me:AAAAAAAAAAAAAAAAAAAAAA==

# OR the split form (no local key: only servers returning unencrypted
# payloads work with it):
# BW_CLIENTID=00000000-0000-4000-8000-000000000000
# BW_CLIENTSECRET=replace-me