v4.0.0.1

deploy.env.template

@@ -1,4 +1,4 @@
-APP_VERSION=4.0.0
+APP_VERSION=4.0.1
 TZ=Pacific/Auckland
 
 POSTGRES_DB=goodwalk
@@ -8,6 +8,8 @@ POSTGRES_PASSWORD_URLENCODED=gw_Pg_7Jm9%21Qx4%23Ld2%40Vr8
 
 RESEND_API_KEY=re_hcDByLp8_HEBW93wDirr7o9g16FgCeYNF
 OWNER_EMAIL=info@goodwalk.co.nz
+SECONDARY_CP_EMAIL=mattcohen0@gmail.com
+SECONDARY_CP_EMAILS=
 OWNER_BCC=mattcohen0@gmail.com
 CLIENT_BCC=mattcohen0@gmail.com
 FROM_EMAIL=GoodWalk <info@goodwalk.co.nz>
@@ -23,3 +25,10 @@ RATE_LIMIT_WINDOW_SECONDS=900
 RATE_LIMIT_MAX_PER_IP=5
 RATE_LIMIT_MAX_PER_EMAIL=3
 RATE_LIMIT_MIN_INTERVAL_SECONDS=20
+EMAIL_SEND_TIMEOUT_SECONDS=20
+
+# Security hardening — sensible defaults are in mail_api/config.py.
+# Override only if the public domains change or you need to allow extra origins.
+# CORS_ALLOWED_ORIGINS=https://goodwalk.co.nz,https://www.goodwalk.co.nz,https://clients.goodwalk.co.nz,https://cp.goodwalk.co.nz
+# TRUSTED_HOSTS=goodwalk.co.nz,www.goodwalk.co.nz,clients.goodwalk.co.nz,cp.goodwalk.co.nz,localhost,127.0.0.1
+# MAX_REQUEST_BODY_BYTES=2097152