feat(newsletter): migrate to listmonk

.env.example

@@ -13,8 +13,18 @@ NEXT_PUBLIC_CMS_URL=https://cms.your-domain.com
 CMS_API_URL=https://cms.your-domain.com
 CMS_API_TOKEN=your_strapi_api_token
 
+# Server-side only — listmonk newsletter integration
+# Base URL of listmonk instance (no trailing slash preferred)
+LISTMONK_BASE_URL=https://newsletter.project-sentiment.org
+# listmonk API user (basic auth username)
+LISTMONK_API_USER=auth
+# listmonk API key (basic auth password)
+LISTMONK_API_KEY=your_listmonk_api_key
+# list ID to subscribe/unsubscribe against
+LISTMONK_LIST_ID=1
+
 # ALTCHA bot protection — server-side only
-# Must match ALTCHA_HMAC_SECRET in the Strapi CMS .env
+# Used by Next.js API routes (`/api/newsletter/challenge` and `/api/newsletter/subscribe`)
 # Generate with: openssl rand -hex 32
 ALTCHA_HMAC_SECRET=your_altcha_hmac_secret
 

package.json

@@ -46,8 +46,8 @@
     "@hookform/resolvers": "5.2.2",
     "@react-email/components": "1.0.12",
     "@strapi/blocks-react-renderer": "1.0.2",
-    "altcha": "2.3.0",
-    "altcha-lib": "1.4.1",
+    "altcha": "3.0.4",
+    "altcha-lib": "2.0.3",
     "clsx": "2.1.1",
     "lucide-react": "1.9.0",
     "next": "16.2.4",