# Copy to .env and fill in. Secrets never go in git or in the image (DOCKER_SPEC §3).

# --- Contact relay: SMTP (submission endpoint of your mail provider) ---
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=            # secret — provide via env file (chmod 600) or a Docker secret
RELAY_FROM=              # optional From address; defaults to SMTP_USER / RELAY_TO
RELAY_TO=connor.babbington@cesnimda.co.uk
RELAY_ALLOWED_ORIGIN=https://cesnimda.co.uk
RELAY_RATE_LIMIT=5       # requests per window per IP
RELAY_WINDOW_SECONDS=600

# --- Site build ---
PUBLIC_SITE_URL=https://cesnimda.co.uk

# --- Infra ---
SITE_PORT=1337           # host port the public-facing site is published on
                         # (put Cloudflare / your TLS proxy in front of it)