diff options
Diffstat (limited to 'docs/DEPLOY.md')
| -rw-r--r-- | docs/DEPLOY.md | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/docs/DEPLOY.md b/docs/DEPLOY.md index 2964a19..7694add 100644 --- a/docs/DEPLOY.md +++ b/docs/DEPLOY.md @@ -145,13 +145,17 @@ launcher — nothing runs as root: install -m 755 scripts/bokftui-bw ~/.local/bin/bokftui-bw BOKF_BW_ITEM=bokf bokftui-bw ``` - `bokftui-bw` works with `rbw` (its agent keeps the vault unlocked for the session) or the official Bitwarden CLI `bw`, where the session key is cached in `~/.cache/bokf/bw-session` (mode 0600) so the master password is only asked when the session expires. On Node < 19 the launcher adds -`--experimental-global-webcrypto` when the SDK's WASM crypto needs it. It reads the item's password, or the custom -field named by `BOKF_BW_FIELD`, and execs the TUI. +`--experimental-global-webcrypto` when the SDK's WASM crypto needs it. It +reads the item's password, or the custom field named by `BOKF_BW_FIELD`, and +execs the TUI. + +With several items matching `bokf`, pass one (`bokftui-bw bokf-anders`) or +let it ask (`bokftui-bw` shows a numbered picker). `BOKF_BW_ITEM` does the +same without an argument. Prefer a scoped, revocable API token over the account password: create one on the host, put it in a custom field (e.g. `token`) of the item, then: |