NeoMail/.env.example at beta · NeoLabs-Systems/NeoMail · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
########################################
# Core runtime
########################################

PORT=3333
NODE_ENV=production
PUBLIC_URL=
SECURE_COOKIES=false

# Runtime roots. Leave blank to use ~/.neomail.
NEOMAIL_HOME=
NEOMAIL_DATA_DIR=
NEOMAIL_CACHE_DIR=
NEOMAIL_ENV_FILE=

# Auto-generated on first start if blank.
SESSION_SECRET=
NEOMAIL_ENCRYPTION_KEY=

########################################
# Account and signup
########################################

NEOMAIL_ALLOW_SIGNUP=true
NEOMAIL_PASSWORD_MIN_LENGTH=12

########################################
# Service email
########################################

NEOMAIL_EMAIL_FROM=
NEOMAIL_EMAIL_SMTP_HOST=
NEOMAIL_EMAIL_SMTP_PORT=587
NEOMAIL_EMAIL_SMTP_USER=
NEOMAIL_EMAIL_SMTP_PASS=
NEOMAIL_EMAIL_SMTP_SECURE=false
NEOMAIL_EMAIL_SMTP_REQUIRE_TLS=true
NEOMAIL_EMAIL_SMTP_REJECT_UNAUTHORIZED=true
NEOMAIL_EMAIL_REPLY_TO=
NEOMAIL_EMAIL_REQUIRE_SIGNUP_CONFIRMATION=false
NEOMAIL_EMAIL_REQUIRE_EMAIL_CHANGE_CONFIRMATION=true
NEOMAIL_EMAIL_NOTIFY_UNUSUAL_LOGIN=true
NEOMAIL_EMAIL_NOTIFY_ACCOUNT_CHANGES=true
NEOMAIL_EMAIL_BRAND_NAME=NeoMail
NEOMAIL_EMAIL_SUPPORT_URL=
NEOMAIL_EMAIL_PUBLIC_URL=
NEOMAIL_EMAIL_TOKEN_TTL_HOURS=24

########################################
# Browser and API
########################################

ALLOWED_ORIGINS=
NEOMAIL_HSTS_MAX_AGE=31536000
NEOMAIL_SOCKET_PING_INTERVAL_MS=
NEOMAIL_SOCKET_PING_TIMEOUT_MS=
NEOMAIL_SOCKET_CONNECT_TIMEOUT_MS=
NEOMAIL_SOCKET_MAX_HTTP_BUFFER_BYTES=

########################################
# AI provider
########################################

# Configure from /admin or set here.
OPENROUTER_API_KEY=

########################################
# Notifications
########################################

# Browser push. Generated locally with `npx web-push generate-vapid-keys`
# (or `node -e "console.log(require('web-push').generateVAPIDKeys())"`) —
# no third-party account needed. Subject must be a mailto: or https: URL.
NEOMAIL_WEB_PUSH_VAPID_PUBLIC_KEY=
NEOMAIL_WEB_PUSH_VAPID_PRIVATE_KEY=
NEOMAIL_WEB_PUSH_VAPID_SUBJECT=

# Android push has no config here — it uses a self-hosted, no-third-party
# design: the Android app keeps a persistent Socket.IO connection open
# (via a foreground service) to this same server, authenticated with the
# user's session cookie, and receives pushes over that connection instead
# of through Firebase/FCM.

########################################
# MCP and API rate shaping
########################################

NEOMAIL_API_RATE_LIMIT_WINDOW_MS=900000
NEOMAIL_API_RATE_LIMIT_MAX=600

########################################
# Data removal (privacy)
########################################

# Autonomous re-scan sweep interval. Only scans; removals always require
# explicit user approval. Default 24h.
NEOMAIL_PRIVACY_SWEEP_INTERVAL_MS=86400000

# Delay between broker requests within a single scan, in ms. Keep this
# polite to avoid tripping anti-bot rate limits.
NEOMAIL_PRIVACY_SCAN_DELAY_MS=400

# How many brokers are fetched concurrently within a single scan. The
# catalog has ~886 scannable brokers, so some concurrency keeps a full scan
# finishing in minutes instead of hours.
NEOMAIL_PRIVACY_SCAN_CONCURRENCY=8

# Optional: a public data-broker registry feed (JSON or CSV) to merge new
# brokers into the catalog via POST /api/privacy/brokers/refresh, e.g. the
# California Data Broker Registry CSV export from
# https://cppa.ca.gov/data_broker_registry/. Leave blank to rely on the
# ~890 brokers already bundled in data/brokers.json.
NEOMAIL_PRIVACY_REGISTRY_URL=