ManyMail/.env.example at master · margbug01/ManyMail · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# ============================================================
# Mail Service (SMTP + REST API)
# ============================================================
MONGO_URL=mongodb://mongodb:27017
DB_NAME=mailserver
JWT_SECRET=your-strong-jwt-secret-here
API_KEY=your-api-key-here
SMTP_HOSTNAME=mail.yourdomain.com
DOMAINS=yourdomain.com
CORS_ORIGINS=http://127.0.0.1:5000
API_PORT=8080
SMTP_PORT=25
ENABLE_API_DOCS=0
EXPOSE_HEALTH_DETAILS=0
RATE_LIMIT_WINDOW=60
RATE_LIMIT_MAX=60
SMTP_RCPT_RATE_WINDOW=60
SMTP_RCPT_RATE_MAX=100
SMTP_DATA_RATE_WINDOW=60
SMTP_DATA_RATE_MAX=20
SMTP_MAX_RCPTS_PER_MESSAGE=20
SMTP_MAX_MESSAGE_BYTES=1048576
SMTP_MAX_ADDRESS_LENGTH=320
SMTP_BLACKLIST_IPS=
SMTP_BLACKLIST_SENDERS=
SMTP_GREYLIST_ENABLED=0
SMTP_GREYLIST_DELAY_SECONDS=60
SMTP_GREYLIST_TTL_SECONDS=3600
# Set to 0/forever to keep messages indefinitely.
MESSAGE_TTL_DAYS=3

# TLS / STARTTLS (optional - mount certs in docker-compose.yml)
# SMTP_TLS_CERT=/certs/fullchain.pem
# SMTP_TLS_KEY=/certs/privkey.pem

# ============================================================
# Mail Viewer (Web UI)
# ============================================================
ENVIRONMENT=production
DUCKMAIL_API_KEY=same-as-API_KEY-above
ACCESS_PASSWORD=your-viewer-login-password
SECRET_KEY=random-flask-session-secret
UNIFIED_PASSWORD=shared-mailbox-password
MAX_IMAGE_PROXY_BYTES=5242880
# Production default is disabled. Set to 1 only if the viewer is strongly protected.
AUTO_CREATE_ACCOUNTS=0
LOGIN_RATE_LIMIT_WINDOW=300
LOGIN_RATE_LIMIT_MAX=10
SENSITIVE_RATE_LIMIT_WINDOW=60
SENSITIVE_RATE_LIMIT_MAX=20

# ============================================================
# External IMAP Bridge (Optional - stores Gmail/Outlook/etc accounts)
# ============================================================
# encrypted = save external IMAP accounts only when IMAP_ACCOUNT_ENCRYPTION_KEY is set.
# disabled = never persist external IMAP accounts.
IMAP_ACCOUNT_PERSISTENCE=encrypted
# Use a strong 32+ character key. Leave empty to skip persistence.
IMAP_ACCOUNT_ENCRYPTION_KEY=

# ============================================================
# Resend (Optional - for sending emails)
# ============================================================
# RESEND_API_KEY=re_xxxxx

# ============================================================
# IMAP Server (Optional - for desktop/mobile mail clients)
# ============================================================
# IMAP_CERTS_PATH=/etc/letsencrypt/live/mail.yourdomain.com
# Or use a local certs/ directory with fullchain.pem + privkey.pem