Set up email sign-in
For self-hosted instances, email authentication is disabled by default. When enabled, users can register with an email address and password, verify their address via a link, and reset their password through email.
Enable email auth
Section titled “Enable email auth”EMAIL_AUTH_ENABLED=trueConfigure SMTP for verification and password reset emails:
SMTP_HOST=smtp.example.comSMTP_PORT=587SMTP_PASS=your-passwordProduction startup requires SMTP_HOST and SMTP_FROM when email authentication is enabled. Supply credentials if your SMTP server requires authentication. Use a provider’s STARTTLS endpoint, typically port 587; the current sender does not establish implicit TLS connections on port 465.
Self-hosted builds use SMTP for both authentication emails and comment notifications. EMAIL_PROVIDER and EMAIL_API_KEY are not supported in these builds.
What email auth enables
Section titled “What email auth enables”- Registration: Users can create an account with name, email, and password (minimum 8 characters).
- Email verification: A verification link is sent on registration. Users cannot log in until their email is verified.
- Password reset: A reset link is sent to the user’s email address, valid for one hour.