diff --git a/README.md b/README.md index 253526a..32be083 100644 --- a/README.md +++ b/README.md @@ -36,29 +36,6 @@ Dockhand is a modern, efficient Docker management application providing real-tim - **Database**: SQLite or PostgreSQL via Drizzle ORM - **Docker**: direct docker API calls. -## Bitwarden Secrets Manager - -The Bitwarden Secrets Manager provider requires an official `bws` client supplied by the -operator. Dockhand does not include, download, or redistribute `bws`. By default the provider -executes `/usr/local/bin/bws`; the process-level `DOCKHAND_BWS_PATH` setting may override this -with another absolute path. - -Configure the Machine Account access token in Dockhand's secret-provider settings and set the -stack's `DOCKHAND_SECRET_SELECTOR` to the Bitwarden Project UUID. - -For Bitwarden EU or a self-hosted instance, also configure the optional server URL. Dockhand -applies its provider URL-safety checks and uses `bws config server-base` in an isolated -temporary profile. - -For the official Dockhand container, mount the operator-managed executable read-only: - -```yaml -volumes: - - /opt/dockhand-tools/bws:/usr/local/bin/bws:ro -``` - -Obtaining, verifying, updating, and licensing `bws` remains the operator's responsibility. - ## Screenshots