# Template for /etc/msmtprc (host-level, NOT deployed via GitOps/Flux - copy
# manually to the target host and fill in the placeholders yourself).
#
# Copy to /etc/msmtprc, replace the __PLACEHOLDER__ values below with your own
# transactional-mail provider's SMTP details, then:
#   chmod 600 /etc/msmtprc
# The password itself is NOT stored here - it's read at send-time from
# /etc/maintenance-notify/mail-password (chmod 600, plain text, one line, no
# trailing newline needed either way).

account maintenance-notify
host __SMTP_HOST__
port __SMTP_PORT__
tls on
# Port 465 = implicit TLS (tls_starttls off, as below). If your provider uses
# port 587/STARTTLS instead, flip this to "tls_starttls on".
tls_starttls off
auth on
user __MAIL_FROM__
passwordeval "cat /etc/maintenance-notify/mail-password"
from __MAIL_FROM__
logfile /var/log/msmtp.log

account default : maintenance-notify