Skip to content

Conversation

@lastbestdev
Copy link
Contributor

🎟️ Tracking

https://bitwarden.atlassian.net/browse/ON-1300

📔 Objective

While following my onboarding epic, I found documentation a bit confusing when setting up the CLI and using EF Core for a database provider (Postgres).

The CLI documentation update now provides detailed instructions for:

  • Setting environment variables for Node to trust certificates for local development. This can be done either by trusting the system certificates (stored in macOS Keychain) with NODE_USE_SYSTEM_CA or manually referencing the certificate file with NODE_EXTRA_CA_CERTS.
  • Configuring the CLI to target your locally running backend, with or without web running locally

EF Core database setup documentation is updated to include the --profile storage flag in the startup docker compose commands. This is due to my finding that client applications do not function properly without Azurite containers running locally as well (without Azurite, API requests would hang up and return failures after multiple retries)

⏰ Reminders before review

  • Contributor guidelines followed
  • All formatters and local linters executed and passed
  • Written new unit and / or integration tests where applicable
  • Protected functional changes with optionality (feature flags)
  • Used internationalization (i18n) for all UI strings
  • CI builds passed
  • Communicated to DevOps any deployment requirements
  • Updated any necessary documentation (Confluence, contributing docs) or informed the documentation
    team

🦮 Reviewer guidelines

  • 👍 (:+1:) or similar for great changes
  • 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
  • ❓ (:question:) for questions
  • 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed
    issue and could potentially benefit from discussion
  • 🎨 (:art:) for suggestions / improvements
  • ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
  • 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
  • ⛏ (:pick:) for minor or nitpick changes

@lastbestdev lastbestdev requested a review from a team as a code owner January 9, 2026 17:49
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Jan 9, 2026

Deploying contributing-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: ae8f637
Status: ✅  Deploy successful!
Preview URL: https://e10e34f3.contributing-docs.pages.dev
Branch Preview URL: https://setup-doc-updates.contributing-docs.pages.dev

View logs

@github-actions
Copy link
Contributor

github-actions bot commented Jan 9, 2026

Logo
Checkmarx One – Scan Summary & Details4035789e-d878-4a2b-8373-5adfe727a0af

New Issues (1)

Checkmarx found the following issues in this Pull Request

# Severity Issue Source File / Package Checkmarx Insight
1 HIGH CVE-2026-21884 Npm-react-router-5.3.4
detailsRecommended version: 7.12.0
Description: A XSS vulnerability exists in in React Router's "" API in Framework Mode when using the "getKey/storageKey" props during Server-...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package

Copy link
Member

@eliykat eliykat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for improving the docs!

@theMickster theMickster added the ai-review Request a Claude code review label Jan 12, 2026
@claude
Copy link
Contributor

claude bot commented Jan 12, 2026

Claude finished @lastbestdev's task in 4m 16s —— View job


Review Complete ✓

Overall Assessment: APPROVE

This PR adds valuable documentation improvements for CLI and EF Core database setup based on real onboarding experience. The changes are:

  • Technically accurate: All environment variables, CLI commands, and port numbers are correct
  • Well-structured: Clear organization with helpful subsections
  • Addresses real pain points: Provides guidance on certificate configuration and local server targeting that was previously missing
  • Low risk: Documentation-only changes with no code modifications

Key Finding

  • One optional style refinement: The new CLI environment setup section could be reformatted to use numbered instructions starting with action verbs (like "1. Export...", "2. Configure...") to match the established pattern throughout the documentation. However, this is purely a style consistency suggestion and should not block merging this valuable improvement.

Review Context

This is a re-review after multiple rounds of feedback. The author has addressed all previous comments from human reviewers (eliykat requested changes twice and both were resolved). The PR is ready to merge, with the style refinement being completely optional.


Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

## Environment setup

### Configure Node to trust development certificates
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎨 SUGGESTED: Add context about environment variables

Consider adding a brief note about when and where to set these environment variables. Currently, it's not clear:

  • Whether these should be set before building or before running
  • Whether they need to be persistent (e.g., added to shell profile) or just for the current session
  • Which terminal session they apply to

Example addition:

### Configure Node to trust development certificates

Set one of the following environment variables in your shell before running the CLI to connect to a local server with self-signed certificates:

This would help developers understand the timing and scope of these configuration steps.

By default, this will use the official Bitwarden servers. You can target your local server by using
the [config command](https://bitwarden.com/help/article/cli/#config). You may need to
[configure node to use your self-signed certificate](https://bitwarden.com/help/article/cli/#using-self-signed-certificates).
By default, this will use the official Bitwarden servers. If you need to develop with Server running
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎨 SUGGESTED: Clarify section reference

Consider making this reference more explicit:

Suggested change
By default, this will use the official Bitwarden servers. If you need to develop with Server running
By default, this will use the official Bitwarden servers. If you need to develop with Server running locally, see [Environment setup](#environment-setup) below.

This makes it easier to understand that "Environment setup" is a specific section heading.

@lastbestdev lastbestdev requested a review from eliykat January 12, 2026 18:32
Copy link
Member

@eliykat eliykat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, just something I spotted.

Co-authored-by: Thomas Rittson <[email protected]>
Comment on lines +60 to +72
### Configure Node to trust development certificates

A quick way to do this is to give Node access to your system certificates:

```bash
export NODE_USE_SYSTEM_CA=1
```

Alternatively, you can add the certificate directly to Node:

```bash
export NODE_EXTRA_CA_CERTS=/path/to/your-certificate.pem
```
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎨 SUGGESTED: Consider reformatting to use numbered instructions for consistency with the project style guide

The project style guide specifies: "Use numbered paragraphs for instructions/procedures, starting with action-oriented verbs."

Consider changing from the current descriptive format to numbered steps:

### Configure Node to trust development certificates

1. Set Node to use your system certificates:

   ```bash
   export NODE_USE_SYSTEM_CA=1

Alternatively, add the certificate directly to Node:

export NODE_EXTRA_CA_CERTS=/path/to/your-certificate.pem

This would match the pattern used throughout the documentation (e.g., in the [Server Setup Guide](../../server/guide.md)).

@lastbestdev lastbestdev requested a review from eliykat January 14, 2026 01:08
Copy link
Member

@eliykat eliykat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@lastbestdev lastbestdev merged commit 2cf2719 into main Jan 14, 2026
16 checks passed
@lastbestdev lastbestdev deleted the setup-doc-updates branch January 14, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-review Request a Claude code review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants