# ===========================================
# Vaultwarden API Configuration
# ===========================================
# Copy this file to .env and fill in your values.
# NEVER commit your actual .env file!

# --- Required ---

# Your Vaultwarden instance URL
VAULTWARDEN_URL=https://vault.yourdomain.com

# Your Vaultwarden login email
VAULTWARDEN_EMAIL=you@example.com

# Your Vaultwarden master password
VAULTWARDEN_PASSWORD=your-master-password

# API key for authenticating to this service (min 32 chars)
# Generate one: openssl rand -base64 32
API_KEY=

# --- Optional ---

# Restrict access to specific IPs/CIDRs
# ALLOWED_IPS=192.168.1.0/24,10.0.0.1

# Auto-whitelist GitHub Actions IPs (for CI/CD)
# ENABLE_GITHUB_IP_RANGES=true

# Trusted reverse proxy IPs (for correct client IP detection)
# TRUSTED_PROXY_IP=172.16.0.0/12

# How often to re-sync the vault (default: 5m)
# SYNC_INTERVAL=5m

# Environment (development shows detailed errors, production hides them)
# ENVIRONMENT=production

# Enable debug logging (shows secret names in logs — NOT for production!)
# DEBUG=false