.env.example

# Verification emails (email-verification, password-reset) — Infomaniak SMTP account #1.
EMAIL_FROM=no-reply@need4deed.org
SMTP_HOST=mail.infomaniak.com
SMTP_PORT=587
SMTP_USER=no-reply@need4deed.org
SMTP_PASS=fake-string

# Notification emails (cron scans, status-change triggers) — Infomaniak SMTP account #2.
# Infomaniak does not allow multiple senders on one SMTP account, hence the split.
EMAIL_FROM_NOTIFY=coordinators@need4deed.org
SMTP_NOTIFY_HOST=mail.infomaniak.com
SMTP_NOTIFY_PORT=587
SMTP_NOTIFY_USER=coordinators@need4deed.org
SMTP_NOTIFY_PASS=fake-string

# Verification email content is read from a per-locale CDN manifest
# (${CDN_BASE_URL}emails/verification.json), cached in-memory; falls back to
# built-in copy. Optional tuning:
EMAIL_TEMPLATE_TTL_MS=600000
EMAIL_TEMPLATE_FETCH_TIMEOUT_MS=5000

# Sender addresses for outbound notification emails (fall back to these defaults if unset).
# EMAIL_FROM_NOTIFY is the SMTP account used as `from` on all 8 notification triggers.
EMAIL_FROM_NOTIFY=coordinators@need4deed.org
EMAIL_FROM_VOLUNTEER=volunteer@need4deed.org
EMAIL_FROM_CONTACT=contact@need4deed.org
EMAIL_FROM_ACCOMPANYING=accompanying@need4deed.org

# Notification controls (default: dry-run on in non-prod, cron active)
# NOTIFY_DRY_RUN=true        — redirect all emails to test@need4deed.org with [TO: <original>] subject prefix
# NOTIFY_EMAIL_DRY_RUN=true  — same, email-only override
# NOTIFY_CRON_MUTED=true     — suppress cron-triggered email scans entirely

# Every outbound email is content-validated before sending (blank fields,
# unresolved {{ placeholders }}, malformed `to`). An invalid one is suspended
# and reported here instead — this always fires for real, bypassing dry-run.
ERROR_EMAIL=dev@need4deed.org

CORS_ORIGINS=http://localhost:3000,http://localhost:3100,http://localhost:3200
CORS_CREDENTIALS=true

URL_EMAIL_VERIFICATION=http://localhost:3000/verify-email

NODE_ENV=development
# HMAC-SHA256 key — at least 32 random bytes (256 bits). Generate with:
#   openssl rand -hex 32
JWT_SECRET=

SLACK_OPS_WEBHOOK_URL=fake-string
SLACK_COMMENTS_WEBHOOK_URL=fake-string

MOCK_VOLUNTEER_DOC_S3_UPLOAD_URL=http://localhost:5000

# Whether to trust the X-Forwarded-* headers from a reverse proxy
# Passed to fastify's `trustProxy` option
# If not set, defaults to false
# true becomes true
# false becomes false
# If only digits, becomes a number (number of hops to trust)
# If a comma-separated list of strings, becomes as a list of strings
# If string without commas passed as string
# For reference see https://fastify.dev/docs/latest/Reference/Server/#trustproxy
TRUST_PROXY=false

# Optional; path to the CA certificate used to verify the Postgres server in production/staging
# (defaults to the baked-in AWS RDS bundle; TLS verification is always strict)
DB_SSL_CA_PATH=