Add email connection for password reset

Author: Maypher

.github/workflows/deploy.yml

@@ -68,11 +68,11 @@ jobs:
           rsync -aqc docker-compose.yml ${{ secrets.ssh_connection }}:~/vectorapp/vector-portfolio/
           ssh -i ~/.ssh/id_rsa ${{ secrets.ssh_connection }} "
               cd ~/vectorapp/vector-portfolio/
-              echo "${{ env.DOMAIN }}" > .env
 
               mkdir -p .secrets
-              echo "${{ secrets.payload_secret }}" > .secrets/payload-secret.txt
-              echo "${{ secrets.postgres_password }}" > .secrets/postgres-password.txt
+              echo "${{ secrets.payload-secret }}" > .secrets/payload-secret.txt
+              echo "${{ secrets.postgres-password }}" > .secrets/postgres-password.txt
+              echo "${{ secrets.email-password }}" > .secrets/email-password.txt
             "
       - name: Build and push changes
         run: |
@@ -94,6 +94,7 @@ jobs:
             rm nginx.tar.gz
 
             export DOMAIN="${{ env.DOMAIN }}"
+            export EMAIL_USER="${{ env.EMAIL_USER }}"
             docker compose up -d --no-build
             docker image prune -f
           "

docker-compose.yml

@@ -7,12 +7,15 @@ services:
       - images:/app/media
     environment:
       - NEXT_PUBLIC_PAYLOAD_URL=https://${DOMAIN:?Website domain required}
+      - SMTP_HOST=${SMTP_HOST:?SMTP_HOST required for email functionality}
+      - EMAIL_USER=${EMAIL_USER:?EMAIL_USER required for email functionality}
     depends_on:
       - postgres
       - nginx
     secrets:
       - postgres-password
       - payload-secret
+      - email-password
   postgres:
     restart: unless-stopped
     image: postgres:17.5-alpine
@@ -45,4 +48,6 @@ secrets:
   postgres-password:
     file: .secrets/postgres-password.txt
   payload-secret:
-    file: .secrets/payload-secret.txt
+    file: .secrets/payload-secret.txt
+  email-password:
+    file: .secrets/email-password.txt

src/lib/secrets.ts

@@ -1,20 +1,18 @@
 import fs from 'node:fs'
 
-// Secrets loaded from files because they're inserted at build time by docker secrets
-// If no secret is found then read it from an environment variable (Mostly to allow for migrations and running node locally)
-export const PAYLOAD_SECRET = (() => {
+function readSecret(path: string, fallback: string = ''): string {
   try {
-    return fs.readFileSync('/run/secrets/payload-secret').toString()
+    return fs.readFileSync(path).toString()
   } catch {
-    return process.env.PAYLOAD_SECRET || ''
+    return fallback || ''
   }
-})()
+}
 
-export const DATABASE_URI = (() => {
-  try {
-    const password = fs.readFileSync('/run/secrets/postgres-password').toString()
-    return `postgres://postgres:${password}@postgres:5432/postgres`
-  } catch {
-    return process.env.DATABASE_URI || ''
-  }
-})()
+// Secrets loaded from files because they're inserted at build time by docker secrets
+// If no secret is found then read it from an environment variable (Mostly to allow for migrations and running node locally)
+export const PAYLOAD_SECRET = readSecret('/run/secrets/payload-secret', process.env.PAYLOAD_SECRET)
+
+export const DATABASE_URI =
+  process.env.DATABASE_URI ||
+  `postgres://postgres:${readSecret('/run/secrets/postgres-password')}@postgres:5432/postgres`
+export const EMAIL_PASSWORD = readSecret('/run/secrets/email-password', process.env.EMAIL_PASSWORD)

src/payload.config.ts

@@ -1,8 +1,9 @@
 // storage-adapter-import-placeholder
 import { postgresAdapter } from '@payloadcms/db-postgres'
 import { payloadCloudPlugin } from '@payloadcms/payload-cloud'
-import { PAYLOAD_SECRET } from './lib/secrets'
+import { EMAIL_PASSWORD, PAYLOAD_SECRET } from './lib/secrets'
 import { DATABASE_URI } from './lib/secrets'
+import { nodemailerAdapter } from '@payloadcms/email-nodemailer'
 
 import {
   lexicalEditor,
@@ -65,6 +66,18 @@ export default buildConfig({
           }
         : false,
   },
+  email: nodemailerAdapter({
+    defaultFromAddress: 'contact@vectorinterior.design',
+    defaultFromName: 'Vector: Interior Design',
+    transportOptions: {
+      host: process.env.SMTP_HOST,
+      port: 587,
+      auth: {
+        user: process.env.EMAIL_USER,
+        pass: EMAIL_PASSWORD,
+      },
+    },
+  }),
   localization: {
     locales: ['en', 'es'],
     defaultLocale: 'es',