# /etc/msmtprc — fleet-managed. Do not hand-edit; change the platform /
# overlay YAML and re-apply.
#
# Linux host system-mail relay (ADR-0051 analogue). msmtp-mta symlinks
# /usr/sbin/sendmail -> msmtp, so cron / logcheck / root alerts reach the
# operator inbox through the authenticated smarthost. Per-deployment knobs
# come from sysrc via {{ }}; SMTP_RELAY_PASSWORD comes from the secret vault
# (never in YAML, never in git). Empty smarthost/user = inert until the
# overlay sets smtp_* + SMTP_RELAY_PASSWORD.

defaults
auth           on
tls            on
tls_starttls   on
tls_trust_file /etc/ssl/certs/ca-certificates.crt
logfile        /var/log/msmtp.log
aliases        /etc/msmtp-aliases

account        relay
host           {{ smtp_smarthost }}
port           {{ smtp_port }}
from           {{ smtp_masquerade }}
user           {{ smtp_user }}
password       {{ SMTP_RELAY_PASSWORD }}

account default : relay
