its been a while

.env.example

@@ -4,6 +4,14 @@ KEYWARDEN_DEBUG=True
 KEYWARDEN_ALLOWED_HOSTS=*
 KEYWARDEN_TRUSTED_ORIGINS=https://reverse.proxy.domain.xyz,https://127.0.0.1
 KEYWARDEN_DOMAIN=https://example.domain.xyz
+KEYWARDEN_SHELL_REMOTE_COMMAND=/bin/bash
+# Set to 1 to include SSH probe/certificate diagnostics in shell failures.
+KEYWARDEN_SHELL_DEBUG=0
+KEYWARDEN_SHELL_PRESERVE_TMP=0
+KEYWARDEN_SHELL_DIAG_TIMEOUT_SECONDS=10
+# Optional legacy global fallback token for agents.
+# Preferred model is per-agent token issued during /agent/enroll.
+# KEYWARDEN_AGENT_API_TOKEN=
 
 # Database
 KEYWARDEN_POSTGRES_DB=keywarden