# Copy to .env and fill in. Secrets never go in git or in the image (DOCKER_SPEC §3).

# --- Contact relay: SMTP (submission endpoint of your mail provider) ---
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=            # secret — provide via env file (chmod 600) or a Docker secret
RELAY_FROM=              # optional From address; defaults to SMTP_USER / RELAY_TO
RELAY_TO=connor.babbington@cesnimda.co.uk
RELAY_ALLOWED_ORIGIN=https://cesnimda.co.uk
RELAY_RATE_LIMIT=5       # requests per window per IP
RELAY_WINDOW_SECONDS=600

# --- Site build ---
PUBLIC_SITE_URL=https://cesnimda.co.uk

# --- Infra (Traefik host reverse proxy) ---
PROXY_NETWORK=traefik_proxy       # existing external Traefik docker network
SITE_HOST=cesnimda.co.uk          # Host rule for the Traefik routers
TRAEFIK_ENTRYPOINT=websecure-external  # Traefik entrypoint name on the host