| name | Bitwarden Build Secrets Recovery |
| description | Instructions for extracting the Play Store upload keystore, Firebase JSON, and passwords from Bitwarden. |
Secrets Recovery Workflow
Varisankya's production signing keys and Firebase API configurations are never committed to version control. They are securely vaulted in Bitwarden under the secure note "Varisankya" in the "Hora" folder.
The Automated Extraction Script
To pull the secrets down into the local headless Ubuntu environment, an automated extraction script is provided in the project root: retrieve_secrets.sh.
What it does:
- Prompts the user to securely unlock Bitwarden (
bw unlock).
- Fetches the
Varisankya secure note.
- Decodes and merges split Base64 properties to extract
app/google-services.json.
- Decodes and merges split Base64 properties to extract
varisankya-upload-key.
- Injects the
Key Alias, Keystore Password, and Key Password directly into the local (uncommitted) local.properties file.
When to run it:
- If a build fails with
File google-services.json is missing.
- If a release build fails due to a missing keystore.
- After moving to a fresh environment.
Usage:
./retrieve_secrets.sh
(The user will need to press Tab to focus into the terminal to provide their Master Password).
