.env.example

# kp2bw environment file — copy to `.env` and uncomment what you need.
#
# ```shell
# cp .env.example .env
# ```
#
# kp2bw auto-loads a `.env` found by searching upward from the current working
# directory. Precedence is always: CLI flag > environment variable > default,
# so a real shell variable overrides any value set here.
# Keep this file out of version control — `.env` is gitignored; this `.env.example` is the template.

# Path to your KeePass 2.x database (positional FILE on the CLI).
#KP2BW_KEEPASS_FILE=passwords.kdbx

# KeePass secrets (prompted interactively if unset).
#KP2BW_KEEPASS_PASSWORD=
#KP2BW_KEEPASS_KEYFILE=keyfile.key

# Bitwarden secrets / targeting.
#KP2BW_BITWARDEN_PASSWORD=
#KP2BW_BITWARDEN_ORG=
#KP2BW_BITWARDEN_COLLECTION=

# Import filtering / shaping.
#KP2BW_IMPORT_TAGS=tag1,tag2
#KP2BW_PATH_TO_NAME=0
#KP2BW_PATH_TO_NAME_SKIP=1
#KP2BW_SKIP_EXPIRED=0
#KP2BW_INCLUDE_RECYCLE_BIN=0
#KP2BW_MIGRATE_METADATA=1
#KP2BW_UPDATE=1
#KP2BW_INCLUDE_OVERSIZE_SECRETS=0

# URL handling.
# Match mode for plain URLs migrated into login URIs:
# default (default, leaves match unset = Bitwarden account default) | domain (force base-domain,
# reproduces KeePassXC) | host | startswith | exact | regex | never.
#KP2BW_URI_MATCH=default
# Interpret KeePassXC URL syntax on additional URLs (quoted = exact, * = wildcard); 0 imports them as plain strings.
#KP2BW_INTERPRET_URI_SYNTAX=1

# Behavior / output.
#KP2BW_YES=0
#KP2BW_VERBOSE=0
#KP2BW_DEBUG=0

# Logging overrides (a full debug log is always written; these relocate it).
#KP2BW_LOG_FILE=
#KP2BW_LOG_DIR=

# Transport tuning.
# Per-request HTTP timeout to `bw serve`, in seconds (default 180, max 3600).
# Raise this for a slow self-hosted server (e.g. Vaultwarden) where individual item writes time out.
# Applied as httpx's single timeout, so it stretches the connect/read/write/pool phases together;
# values above 3600 are clamped.
#KP2BW_HTTP_TIMEOUT=180

# Upgrade existing items: re-fold legacy KP2A_URL*/AndroidApp custom fields into login URIs,
# then exit (no migration; no KeePass database needed). For imports made before URL folding.
#KP2BW_MIGRATE_URIS=0

# Print a read-only URI collision report and exit (changes nothing): groups login URLs by
# registrable domain, lists the ones with multiple hosts (the entries that all autofill together
# under base-domain match). 'keepass' reads the db, 'bitwarden' reads the live vault.
#KP2BW_REPORT_URIS=bitwarden

# Finalize mode.
# When set, kp2bw removes the KP2BW_ID dedup stamp from every migrated item and exits
# (no migration; no KeePass database needed). Run once the migration is complete and
# you're ready to fully adopt Bitwarden.
#KP2BW_STRIP_IDS=0