feat: make SMTP auth optional and add SMTP_SECURE config (#92)

* feat: add SMTP_SECURE option to email config

* feat: allow unauthenticated SMTP servers

.env.example

@@ -10,10 +10,11 @@ POSTGRES_PASSWORD=
 
 # SMTP (optional)
 SMTP_HOST=
-SMTP_PORT=465 # Port 587 will not work
+SMTP_PORT=465
 SMTP_USER=
 SMTP_PASSWORD=
 EMAIL_FROM= # e.g. "Kan <hello@mail.kan.bn>"
+SMTP_SECURE= # set to "false" to use port 587
 
 # S3 storage (optional)
 S3_REGION=

README.md

@@ -139,13 +139,14 @@ pnpm dev
 ## Environment Variables 🔐
 
 | Variable                         | Description                                              | Required           | Example                                       |
-| -------------------------------- | ----------------------------- | ------------------ | --------------------------------------------- |
+| -------------------------------- | -------------------------------------------------------- | ------------------ | --------------------------------------------- |
 | `POSTGRES_URL`                   | PostgreSQL connection URL                                | Yes                | `postgres://user:pass@localhost:5432/db`      |
 | `EMAIL_FROM`                     | Sender email address                                     | For Email          | `"Kan <hello@mail.kan.bn>"`                   |
 | `SMTP_HOST`                      | SMTP server hostname                                     | For Email          | `smtp.resend.com`                             |
 | `SMTP_PORT`                      | SMTP server port                                         | For Email          | `465`                                         |
-| `SMTP_USER`                      | SMTP username/email           | For Email          | `resend`                                      |
-| `SMTP_PASSWORD`                  | SMTP password/token           | For Email          | `re_xxxx`                                     |
+| `SMTP_USER`                      | SMTP username/email                                      | No                 | `resend`                                      |
+| `SMTP_PASSWORD`                  | SMTP password/token                                      | No                 | `re_xxxx`                                     |
+| `SMTP_SECURE`                    | Use secure SMTP connection (defaults to true if not set) | For Email          | `true`                                        |
 | `NEXT_PUBLIC_BASE_URL`           | Base URL of your installation                            | Yes                | `http://localhost:3000`                       |
 | `BETTER_AUTH_SECRET`             | Auth encryption secret                                   | Yes                | Random 32+ char string                        |
 | `BETTER_AUTH_TRUSTED_ORIGINS`    | Allowed callback origins                                 | No                 | `http://localhost:3000,http://localhost:3001` |

cloud/docker-compose.yml

@@ -28,6 +28,7 @@ services:
       - SMTP_PORT=${SMTP_PORT}
       - SMTP_USER=${SMTP_USER}
       - SMTP_PASSWORD=${SMTP_PASSWORD}
+      - SMTP_SECURE=${SMTP_SECURE}
       - EMAIL_FROM=${EMAIL_FROM}
 
       # S3 storage

docker-compose.yml

@@ -81,14 +81,6 @@ services:
       - APPLE_CLIENT_ID=${APPLE_CLIENT_ID}
       - APPLE_CLIENT_SECRET=${APPLE_CLIENT_SECRET}
       - APPLE_APP_BUNDLE_IDENTIFIER=${APPLE_APP_BUNDLE_IDENTIFIER}
-
-      # Cloud (not required)
-      - NEXT_PUBLIC_KAN_ENV=${NEXT_PUBLIC_KAN_ENV}
-      - NEXT_PUBLIC_UMAMI_ID=${NEXT_PUBLIC_UMAMI_ID}
-      - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY}
-      - STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET}
-      - NEXT_PUBLIC_POSTHOG_KEY=${NEXT_PUBLIC_POSTHOG_KEY}
-      - NEXT_PUBLIC_POSTHOG_HOST=${NEXT_PUBLIC_POSTHOG_HOST}
     depends_on:
       - postgres
     restart: unless-stopped

packages/email/src/sendEmail.tsx

@@ -16,11 +16,14 @@ const emailTemplates: Record<Templates, React.FC> = {
 const transporter = nodemailer.createTransport({
   host: process.env.SMTP_HOST,
   port: Number(process.env.SMTP_PORT),
-  secure: true,
+  secure: process.env.SMTP_SECURE !== "false",
+  ...(process.env.SMTP_USER &&
+    process.env.SMTP_PASSWORD && {
       auth: {
         user: process.env.SMTP_USER,
         pass: process.env.SMTP_PASSWORD,
       },
+    }),
 });
 
 export const sendEmail = async (

turbo.json

@@ -91,6 +91,7 @@
     "SMTP_PORT",
     "SMTP_USER",
     "SMTP_PASSWORD",
+    "SMTP_SECURE",
     "NEXT_PUBLIC_KAN_ENV",
     "STRIPE_SECRET_KEY",
     "STRIPE_WEBHOOK_SECRET",