Fix SMTP proxy certificates and speed up CI

2026-09-18 11:59:33 +02:00
parent 82a89cd3d9
commit ad353190f3
5 changed files with 22 additions and 9 deletions
@@ -15,6 +15,12 @@ export function getMailTransport(): nodemailer.Transporter {
    host: SMTP_HOST,
    port: Number(SMTP_PORT),
    secure: Number(SMTP_PORT) === 465,
+    tls: {
+      // Keep certificate verification enabled by default. A private SMTP
+      // proxy may expose a self-signed certificate; that deployment can
+      // explicitly opt out without weakening unrelated HTTPS requests.
+      rejectUnauthorized: process.env.SMTP_TLS_REJECT_UNAUTHORIZED !== "false",
+    },
    connectionTimeout: 10000,
    greetingTimeout: 10000,
    socketTimeout: 20000,