# Production email checklist (operator)

Complete these steps on the server / Forgejo—nothing in this file is applied automatically.

## Prerequisites

- Domain **bilhej.se** DNS managed at your registrar
- BilHej deployed via Forgejo **Deploy to Production**

## 1. Choose a transactional provider

Recommended: [Resend](https://resend.com) or [Brevo](https://www.brevo.com) (EU, free tier).

## 2. Verify the domain

In the provider dashboard, add **bilhej.se** and publish the DNS records they give you:

- **SPF** (TXT)
- **DKIM** (CNAME or TXT)
- **DMARC** (TXT, optional but recommended)

You do **not** need MX records if the app only sends mail (forgot-password).

Wait until the provider shows the domain as verified.

## 3. Create SMTP credentials

Copy from the provider:

- SMTP host (e.g. `smtp.resend.com`)
- Port (`587`)
- Username / password or API key used as password

## 4. Update production `.env`

On the server (same file used by `docker-compose.prod.yml`):

```bash
APP_PUBLIC_BASE_URL=https://bilhej.se
MAIL_HOST=<provider-smtp-host>
MAIL_PORT=587
MAIL_USERNAME=<from-provider>
MAIL_PASSWORD=<from-provider>
MAIL_FROM=noreply@bilhej.se
```

## 5. Deploy

Run **Deploy to Production** in Forgejo (do not rsync or manual compose on the server).

## 6. Smoke test

1. Open https://bilhej.se/logga-in → **Glömt lösenord?**
2. Enter an email that exists in `users`
3. Check the inbox (and spam) for the reset message
4. If nothing arrives: `docker logs bilhej-backend-prod 2>&1 | grep -i mail`

Fallback without SMTP: reset links still appear in backend logs (`Password reset link for`).