Set up email sign-in

For self-hosted instances, email authentication is disabled by default. When enabled, users can register with an email address and password, verify their address via a link, and reset their password through email.

Enable email auth

EMAIL_AUTH_ENABLED=true

Configure SMTP for verification and password reset emails:

SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_USER=[email protected]
SMTP_PASS=your-password
SMTP_FROM=[email protected]

Production startup requires SMTP_FROM when email authentication is enabled, and SMTP_HOST unless EMAIL_PROVIDER=cloudflare is set. Supply credentials if your SMTP server requires authentication. Use a provider’s STARTTLS endpoint, typically port 587; the current SMTP sender does not establish implicit TLS connections on port 465.

The managed cloud build delivers authentication email through the Cloudflare Email Sending REST API. Set EMAIL_PROVIDER=cloudflare with CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID, plus SMTP_FROM as the sender; that path sends over HTTPS, so SMTP_HOST is not required. The sender source is not build-tagged, so a self-hosted build that sets these variables also uses the Cloudflare path, but the supported self-hosted configuration is SMTP.

What email auth enables

• Registration: Users can create an account with name, email, and password (minimum 8 characters).
• Email verification: A verification link, valid for 24 hours, is sent on registration. Users cannot log in until their email is verified.
• Password reset: A reset link is sent to the user’s email address, valid for one hour.