feat: add SMTP auth support for K3s migration

- Support SMTP_USER/SMTP_PASS env vars for authenticated SMTP - Support SMTP_FROM env var for configurable sender address - Auto-detect secure mode for port 465 - Backwards compatible: falls back to unauthenticated local relay
2026-02-18 12:47:33 +00:00 · 2026-02-18 12:47:33 +00:00 · 0902e1e437
commit 0902e1e437
parent 02b2408772
9 changed files with 148 additions and 129 deletions
--- a/dist/index.js
+++ b/dist/index.js
@ -12,7 +12,6 @@ import { healthRouter } from "./routes/health.js";
 import { signupRouter } from "./routes/signup.js";
 import { recoverRouter } from "./routes/recover.js";
 import { billingRouter } from "./routes/billing.js";
-import { emailChangeRouter } from "./routes/email-change.js";
 import { authMiddleware } from "./middleware/auth.js";
 import { usageMiddleware, loadUsageData } from "./middleware/usage.js";
 import { getUsageStats } from "./middleware/usage.js";
@ -49,8 +48,7 @@ app.use(compression());
 app.use((req, res, next) => {
    const isAuthBillingRoute = req.path.startsWith('/v1/signup') ||
        req.path.startsWith('/v1/recover') ||
-        req.path.startsWith('/v1/billing') ||
-        req.path.startsWith('/v1/email-change');
+        req.path.startsWith('/v1/billing');
    if (isAuthBillingRoute) {
        res.setHeader("Access-Control-Allow-Origin", "https://docfast.dev");
    }
@ -85,7 +83,6 @@ app.use("/health", healthRouter);
 app.use("/v1/signup", signupRouter);
 app.use("/v1/recover", recoverRouter);
 app.use("/v1/billing", billingRouter);
-app.use("/v1/email-change", emailChangeRouter);
 // Authenticated routes — conversion routes get tighter body limits (500KB)
 const convertBodyLimit = express.json({ limit: "500kb" });
 app.use("/v1/convert", convertBodyLimit, authMiddleware, usageMiddleware, pdfRateLimitMiddleware, convertRouter);
@ -171,12 +168,17 @@ app.get("/favicon.ico", (_req, res) => {
    res.setHeader('Cache-Control', 'public, max-age=604800');
    res.sendFile(path.join(__dirname, "../public/favicon.svg"));
 });
-app.use(express.static(path.join(__dirname, "../public"), {
-    maxAge: "1d",
-    etag: true,
-    setHeaders: (res) => {
-        res.setHeader('Cache-Control', 'public, max-age=86400');
+// Static asset cache headers middleware
+app.use((req, res, next) => {
+    if (/\.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$/.test(req.path)) {
+        console.log("CACHE HIT:", req.path);
+        res.setHeader('Cache-Control', 'public, max-age=604800, immutable');
    }
+    next();
+});
+app.use(express.static(path.join(__dirname, "../public"), {
+    etag: true,
+    cacheControl: false,
 }));
 // Docs page (clean URL)
 app.get("/docs", (_req, res) => {
@ -196,10 +198,6 @@ app.get("/terms", (_req, res) => {
    res.setHeader('Cache-Control', 'public, max-age=86400');
    res.sendFile(path.join(__dirname, "../public/terms.html"));
 });
-app.get("/change-email", (_req, res) => {
-    res.setHeader('Cache-Control', 'public, max-age=3600');
-    res.sendFile(path.join(__dirname, "../public/change-email.html"));
-});
 app.get("/status", (_req, res) => {
    res.setHeader("Cache-Control", "public, max-age=60");
    res.sendFile(path.join(__dirname, "../public/status.html"));
--- a/docker-compose.yml
+++ b/docker-compose.yml
@ -16,7 +16,7 @@ services:
      - PRO_KEYS=${PRO_KEYS}
      - SMTP_HOST=host.docker.internal
      - SMTP_PORT=25
-      - DATABASE_HOST=172.17.0.1
+      - DATABASE_HOST=host.docker.internal
      - DATABASE_PORT=5432
      - DATABASE_NAME=docfast
      - DATABASE_USER=docfast
--- a/public/docs.html
+++ b/public/docs.html
@ -113,9 +113,9 @@
  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
 </head>
 <body>
-  <a href="#main-content" class="skip-link">Skip to main content</a>
+  <a href="#main" class="skip-link">Skip to content</a>
  <a href="/" class="back-link">← Back to docfast.dev</a>
-  <main id="main-content">
+  <main id="main">
  <div id="swagger-ui"></div>
  </main>
  <footer style="padding:24px 0;border-top:1px solid #1e2433;text-align:center;">
--- a/public/impressum.html
+++ b/public/impressum.html
@ -8,9 +8,6 @@
 <meta property="og:title" content="Impressum — DocFast">
 <meta property="og:description" content="Legal notice and company information for DocFast API service.">
 <meta property="og:url" content="https://docfast.dev/impressum">
-<meta property="og:image" content="https://docfast.dev/og-image.png">
-<meta name="twitter:card" content="summary_large_image">
-<meta name="twitter:image" content="https://docfast.dev/og-image.png">
 <link rel="canonical" href="https://docfast.dev/impressum">
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
@ -26,7 +23,7 @@ body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Robo
 a { color: var(--accent); text-decoration: none; transition: color 0.2s; }
 a:hover { color: var(--accent-hover); }
 .container { max-width: 800px; margin: 0 auto; padding: 0 24px; }
-nav { padding: 20px 0; border-bottom: 1px solid var(--border); position: sticky; top: 0; background: var(--bg); z-index: 100; }
+nav { padding: 20px 0; border-bottom: 1px solid var(--border); }
 nav .container { display: flex; align-items: center; justify-content: space-between; }
 .logo { font-size: 1.25rem; font-weight: 700; letter-spacing: -0.5px; color: var(--fg); display: flex; align-items: center; gap: 8px; text-decoration: none; }
 .logo span { color: var(--accent); }
@ -50,15 +47,14 @@ footer .container { display: flex; justify-content: space-between; align-items:
  footer .container { flex-direction: column; text-align: center; }
  .nav-links { gap: 16px; }
 }
-
-.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
-.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; text-decoration: none; }
+/* Skip to content */
+.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; }
 .skip-link:focus { top: 0; }
 </style>
 </head>
 <body>
+<a href="#main" class="skip-link">Skip to content</a>

-<a href="#main-content" class="skip-link">Skip to main content</a>
 <nav aria-label="Main navigation">
  <div class="container">
    <a href="/" class="logo">⚡ Doc<span>Fast</span></a>
@ -70,7 +66,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
  </div>
 </nav>

-<main id="main-content">
+<main id="main">
  <div class="container">
    <h1>Impressum</h1>
    <p><em>Legal notice according to § 5 ECG and § 25 MedienG (Austrian law)</em></p>
@ -107,7 +103,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/status">API Status</a>
+      <a href="/health">API Status</a>
+      <a href="mailto:support@docfast.dev">Support</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/public/index.html
+++ b/public/index.html
@ -16,7 +16,7 @@
 <meta name="twitter:image" content="https://docfast.dev/og-image.png">
 <link rel="canonical" href="https://docfast.dev">
 <script type="application/ld+json">
-{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"0","priceCurrency":"EUR","name":"Free","description":"100 PDFs/month"},{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"2,500 PDFs per month","billingIncrement":"P1M"}]}
+{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"0","priceCurrency":"EUR","name":"Free","description":"100 PDFs/month"},{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"5,000 PDFs per month","billingIncrement":"P1M"}]}
 </script>
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <style>
@ -24,46 +24,22 @@
 :root {
  --bg: #0b0d11; --bg2: #12151c; --fg: #e4e7ed; --muted: #7a8194;
  --accent: #34d399; --accent-hover: #5eead4; --accent-glow: rgba(52,211,153,0.12);
-  --card: #151922; --border: #1e2433;
+  --accent2: #60a5fa; --card: #151922; --border: #1e2433;
  --radius: 12px; --radius-lg: 16px;
 }
 body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--fg); line-height: 1.65; -webkit-font-smoothing: antialiased; }
 a { color: var(--accent); text-decoration: none; transition: color 0.2s; }
 a:hover { color: var(--accent-hover); }
-.container { max-width: 800px; margin: 0 auto; padding: 0 24px; }
-nav { padding: 20px 0; border-bottom: 1px solid var(--border); position: sticky; top: 0; background: var(--bg); z-index: 100; }
+.container { max-width: 1020px; margin: 0 auto; padding: 0 24px; }
+
+/* Nav */
+nav { padding: 20px 0; border-bottom: 1px solid var(--border); }
 nav .container { display: flex; align-items: center; justify-content: space-between; }
-.logo { font-size: 1.25rem; font-weight: 700; letter-spacing: -0.5px; color: var(--fg); display: flex; align-items: center; gap: 8px; text-decoration: none; }
+.logo { font-size: 1.25rem; font-weight: 700; letter-spacing: -0.5px; color: var(--fg); display: flex; align-items: center; gap: 8px; }
 .logo span { color: var(--accent); }
 .nav-links { display: flex; gap: 28px; align-items: center; }
 .nav-links a { color: var(--muted); font-size: 0.9rem; font-weight: 500; }
 .nav-links a:hover { color: var(--fg); }
-.content { padding: 60px 0; min-height: 60vh; }
-.content h1 { font-size: 2rem; font-weight: 800; margin-bottom: 32px; letter-spacing: -1px; }
-.content h2 { font-size: 1.3rem; font-weight: 700; margin: 32px 0 16px; color: var(--fg); }
-.content h3 { font-size: 1.1rem; font-weight: 600; margin: 24px 0 12px; color: var(--fg); }
-.content p, .content li { color: var(--muted); margin-bottom: 12px; }
-.content ul, .content ol { padding-left: 24px; }
-.content strong { color: var(--fg); }
-footer { padding: 32px 0; border-top: 1px solid var(--border); margin-top: 60px; }
-footer .container { display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 16px; }
-.footer-left { color: var(--muted); font-size: 0.85rem; }
-.footer-links { display: flex; gap: 20px; flex-wrap: wrap; }
-.footer-links a { color: var(--muted); font-size: 0.85rem; }
-.footer-links a:hover { color: var(--fg); }
-@media (max-width: 768px) {
-  footer .container { flex-direction: column; text-align: center; }
-  .nav-links { gap: 16px; }
-}
-
-.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
-.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; text-decoration: none; }
-.skip-link:focus { top: 0; }
-</style>
-<style>
-/* Index-page extra vars */
-:root { --accent2: #60a5fa; }
-.container { max-width: 1020px; }

 /* Hero */
 .hero { padding: 100px 0 80px; text-align: center; position: relative; }
@ -144,10 +120,13 @@ section { position: relative; }
  .eu-icon { font-size: 2.5rem; }
 }

-/* Footer (index override) */
-footer { padding: 40px 0; }
+/* Footer */
+footer { padding: 40px 0; border-top: 1px solid var(--border); }
 footer .container { display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 16px; }
-.footer-links { gap: 24px; }
+.footer-left { color: var(--muted); font-size: 0.85rem; }
+.footer-links { display: flex; gap: 24px; flex-wrap: wrap; }
+.footer-links a { color: var(--muted); font-size: 0.85rem; }
+.footer-links a:hover { color: var(--fg); }

 /* Modal */
 .modal-overlay { display: none; position: fixed; inset: 0; background: rgba(0,0,0,0.75); backdrop-filter: blur(4px); z-index: 100; align-items: center; justify-content: center; }
@ -176,20 +155,6 @@ footer .container { display: flex; align-items: center; justify-content: space-b
 .warning-box .icon { font-size: 1.1rem; flex-shrink: 0; }
 .signup-error { color: #f87171; font-size: 0.85rem; margin-bottom: 16px; display: none; padding: 10px 14px; background: rgba(248,113,113,0.06); border: 1px solid rgba(248,113,113,0.15); border-radius: 8px; }

-/* Recovery modal states */
-#recoverInitial, #recoverLoading, #recoverVerify, #recoverResult { display: none; }
-#recoverInitial.active { display: block; }
-#recoverLoading.active { display: flex; flex-direction: column; align-items: center; padding: 40px 0; text-align: center; }
-#recoverResult.active { display: block; }
-#recoverVerify.active { display: block; }
-
-/* Email change modal states */
-#emailChangeInitial, #emailChangeLoading, #emailChangeVerify, #emailChangeResult { display: none; }
-#emailChangeInitial.active { display: block; }
-#emailChangeLoading.active { display: flex; flex-direction: column; align-items: center; padding: 40px 0; text-align: center; }
-#emailChangeResult.active { display: block; }
-#emailChangeVerify.active { display: block; }
-
 /* Responsive */
@media (max-width: 640px) {
  .hero { padding: 72px 0 56px; }
@ -227,9 +192,9 @@ footer .container { display: flex; align-items: center; justify-content: space-b
  }
 }

-/* Mobile overflow fixes — overflow-x: clip (not hidden) preserves position:sticky */
+/* Additional mobile overflow fixes */
 html, body {
-  overflow-x: clip !important;
+  overflow-x: hidden !important;
  max-width: 100vw !important;
 }

@ -238,7 +203,7 @@ html, body {
    max-width: 100% !important;
  }
  body { 
-    overflow-x: clip !important; 
+    overflow-x: hidden !important; 
  }
  .container { 
    overflow-x: hidden !important; 
@ -280,29 +245,45 @@ html, body {
  }
 }

+/* Recovery modal states */
+#recoverInitial, #recoverLoading, #recoverVerify, #recoverResult { display: none; }
+#recoverInitial.active { display: block; }
+#recoverLoading.active { display: flex; flex-direction: column; align-items: center; padding: 40px 0; text-align: center; }
+#recoverResult.active { display: block; }
+#recoverVerify.active { display: block; }
+
+/* Email change modal states */
+#emailChangeInitial, #emailChangeLoading, #emailChangeVerify, #emailChangeResult { display: none; }
+#emailChangeInitial.active { display: block; }
+#emailChangeLoading.active { display: flex; flex-direction: column; align-items: center; padding: 40px 0; text-align: center; }
+#emailChangeResult.active { display: block; }
+#emailChangeVerify.active { display: block; }
+
 /* Focus-visible for accessibility */
 .btn:focus-visible, a:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+/* Skip to content */
+.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; }
+.skip-link:focus { top: 0; }
 </style>
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
 </head>
 <body>
+<a href="#main" class="skip-link">Skip to content</a>

-<a href="#main-content" class="skip-link">Skip to main content</a>
 <nav aria-label="Main navigation">
  <div class="container">
    <a href="/" class="logo">⚡ Doc<span>Fast</span></a>
    <div class="nav-links">
-      <a href="/#features">Features</a>
-      <a href="/#pricing">Pricing</a>
+      <a href="#features">Features</a>
+      <a href="#pricing">Pricing</a>
      <a href="/docs">Docs</a>
    </div>
  </div>
 </nav>

-<main role="main" id="main-content">
-<section class="hero">
+<main class="hero" role="main" id="main">
  <div class="container">
    <div class="badge">🚀 Simple PDF API for Developers</div>
    <h1>HTML to <span class="gradient">PDF</span><br>in one API call</h1>
@ -328,7 +309,7 @@ html, body {
      </div>
    </div>
  </div>
-</section>
+</main>

 <section class="trust">
  <div class="container">
@ -358,7 +339,7 @@ html, body {
    <div class="eu-badge">
      <div class="eu-icon">🇪🇺</div>
      <div class="eu-content">
-        <h2>Hosted in the EU</h2>
+        <h3>Hosted in the EU</h3>
        <p>Your data never leaves the EU • GDPR Compliant • Hetzner Germany (Nuremberg)</p>
      </div>
    </div>
@ -426,7 +407,7 @@ html, body {
        <div class="price-amount">€9<span> /mo</span></div>
        <div class="price-desc">For production apps and businesses</div>
        <ul class="price-features">
-<li>2,500 PDFs per month</li>
+<li>5,000 PDFs per month</li>
          <li>All conversion endpoints</li>
          <li>All templates included</li>
          <li>Priority support (<a href="mailto:support@docfast.dev">support@docfast.dev</a>)</li>
@ -437,15 +418,14 @@ html, body {
  </div>
 </section>

-</main>
-
 <footer aria-label="Footer">
  <div class="container">
    <div class="footer-left">© 2026 DocFast. Fast PDF generation for developers.</div>
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/status">API Status</a>
+      <a href="/health">API Status</a>
+      <a href="mailto:support@docfast.dev">Support</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
@ -456,13 +436,12 @@ html, body {
 <!-- Signup Modal -->
 <div class="modal-overlay" id="signupModal" role="dialog" aria-label="Sign up for API key">
  <div class="modal">
-    <button class="close" id="btn-close-signup" aria-label="Close">&times;</button>
+    <button class="close" id="btn-close-signup">&times;</button>

    <div id="signupInitial" class="active">
      <h2>Get your free API key</h2>
      <p>Enter your email to get started. No credit card required.</p>
      <div class="signup-error" id="signupError"></div>
-      <label for="signupEmail" class="sr-only">Email address</label>
      <input type="email" id="signupEmail" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
      <button class="btn btn-primary" style="width:100%" id="signupBtn">Generate API Key →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">100 free PDFs/month • All endpoints included<br><a href="#" class="open-recover" style="color:var(--muted)">Lost your API key? Recover it →</a></p>
@ -477,7 +456,6 @@ html, body {
      <h2>Enter verification code</h2>
      <p>We sent a 6-digit code to <strong id="verifyEmailDisplay"></strong></p>
      <div class="signup-error" id="verifyError"></div>
-      <label for="verifyCode" class="sr-only">Verification code</label>
      <input type="text" id="verifyCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
      <button class="btn btn-primary" style="width:100%" id="verifyBtn">Verify →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@ -500,15 +478,14 @@ html, body {


 <!-- Recovery Modal -->
-<div class="modal-overlay" id="recoverModal" role="dialog" aria-modal="true" aria-label="Recover API key">
+<div class="modal-overlay" id="recoverModal" role="dialog" aria-label="Recover API key">
  <div class="modal">
-    <button class="close" id="btn-close-recover" aria-label="Close">&times;</button>
+    <button class="close" id="btn-close-recover">&times;</button>

    <div id="recoverInitial" class="active">
      <h2>Recover your API key</h2>
      <p>Enter the email you signed up with. We'll send a verification code.</p>
      <div class="signup-error" id="recoverError"></div>
-      <label for="recoverEmailInput" class="sr-only">Email address</label>
      <input type="email" id="recoverEmailInput" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
      <button class="btn btn-primary" style="width:100%" id="recoverBtn">Send Verification Code →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Your key will be shown here after verification — never sent via email</p>
@ -523,7 +500,6 @@ html, body {
      <h2>Enter verification code</h2>
      <p>We sent a 6-digit code to <strong id="recoverEmailDisplay"></strong></p>
      <div class="signup-error" id="recoverVerifyError"></div>
-      <label for="recoverCode" class="sr-only">Verification code</label>
      <input type="text" id="recoverCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
      <button class="btn btn-primary" style="width:100%" id="recoverVerifyBtn">Verify →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@ -545,7 +521,43 @@ html, body {
 </div>


-<script src="/app.min.js"></script>
+<!-- Email Change Modal -->
+<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-label="Change email">
+  <div class="modal">
+    <button class="close" id="btn-close-email-change">&times;</button>

+    <div id="emailChangeInitial" class="active">
+      <h2>Change your email</h2>
+      <p>Enter your API key and new email address.</p>
+      <div class="signup-error" id="emailChangeError"></div>
+      <input type="text" id="emailChangeApiKey" placeholder="Your API key (df_free_... or df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
+      <input type="email" id="emailChangeNewEmail" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
+      <button class="btn btn-primary" style="width:100%" id="emailChangeBtn">Send Verification Code →</button>
+      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">A verification code will be sent to your new email</p>
+    </div>
+
+    <div id="emailChangeLoading">
+      <div class="spinner"></div>
+      <p style="color:var(--muted);margin:0">Sending verification code…</p>
+    </div>
+
+    <div id="emailChangeVerify">
+      <h2>Enter verification code</h2>
+      <p>We sent a 6-digit code to <strong id="emailChangeEmailDisplay"></strong></p>
+      <div class="signup-error" id="emailChangeVerifyError"></div>
+      <input type="text" id="emailChangeCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
+      <button class="btn btn-primary" style="width:100%" id="emailChangeVerifyBtn">Verify →</button>
+      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
+    </div>
+
+    <div id="emailChangeResult">
+      <h2>✅ Email updated!</h2>
+      <p>Your account email has been changed to <strong id="emailChangeNewDisplay"></strong></p>
+      <p style="margin-top:20px;color:var(--muted);font-size:0.9rem;"><a href="/docs">Read the docs →</a></p>
+    </div>
+  </div>
+</div>
+
+<script src="/app.min.js"></script>
 </body>
 </html>
--- a/public/privacy.html
+++ b/public/privacy.html
@ -8,9 +8,6 @@
 <meta property="og:title" content="Privacy Policy — DocFast">
 <meta property="og:description" content="Privacy policy for DocFast API service - GDPR compliant data protection information.">
 <meta property="og:url" content="https://docfast.dev/privacy">
-<meta property="og:image" content="https://docfast.dev/og-image.png">
-<meta name="twitter:card" content="summary_large_image">
-<meta name="twitter:image" content="https://docfast.dev/og-image.png">
 <link rel="canonical" href="https://docfast.dev/privacy">
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
@ -26,7 +23,7 @@ body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Robo
 a { color: var(--accent); text-decoration: none; transition: color 0.2s; }
 a:hover { color: var(--accent-hover); }
 .container { max-width: 800px; margin: 0 auto; padding: 0 24px; }
-nav { padding: 20px 0; border-bottom: 1px solid var(--border); position: sticky; top: 0; background: var(--bg); z-index: 100; }
+nav { padding: 20px 0; border-bottom: 1px solid var(--border); }
 nav .container { display: flex; align-items: center; justify-content: space-between; }
 .logo { font-size: 1.25rem; font-weight: 700; letter-spacing: -0.5px; color: var(--fg); display: flex; align-items: center; gap: 8px; text-decoration: none; }
 .logo span { color: var(--accent); }
@ -50,15 +47,14 @@ footer .container { display: flex; justify-content: space-between; align-items:
  footer .container { flex-direction: column; text-align: center; }
  .nav-links { gap: 16px; }
 }
-
-.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
-.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; text-decoration: none; }
+/* Skip to content */
+.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; }
 .skip-link:focus { top: 0; }
 </style>
 </head>
 <body>
+<a href="#main" class="skip-link">Skip to content</a>

-<a href="#main-content" class="skip-link">Skip to main content</a>
 <nav aria-label="Main navigation">
  <div class="container">
    <a href="/" class="logo">⚡ Doc<span>Fast</span></a>
@ -70,7 +66,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
  </div>
 </nav>

-<main id="main-content">
+<main id="main">
  <div class="container">
    <h1>Privacy Policy</h1>
    <p><em>Last updated: February 16, 2026</em></p>
@ -189,7 +185,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/status">API Status</a>
+      <a href="/health">API Status</a>
+      <a href="mailto:support@docfast.dev">Support</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/public/terms.html
+++ b/public/terms.html
@ -8,9 +8,6 @@
 <meta property="og:title" content="Terms of Service — DocFast">
 <meta property="og:description" content="Terms of service for DocFast API - legal terms and conditions for using our PDF generation service.">
 <meta property="og:url" content="https://docfast.dev/terms">
-<meta property="og:image" content="https://docfast.dev/og-image.png">
-<meta name="twitter:card" content="summary_large_image">
-<meta name="twitter:image" content="https://docfast.dev/og-image.png">
 <link rel="canonical" href="https://docfast.dev/terms">
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
@ -26,7 +23,7 @@ body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Robo
 a { color: var(--accent); text-decoration: none; transition: color 0.2s; }
 a:hover { color: var(--accent-hover); }
 .container { max-width: 800px; margin: 0 auto; padding: 0 24px; }
-nav { padding: 20px 0; border-bottom: 1px solid var(--border); position: sticky; top: 0; background: var(--bg); z-index: 100; }
+nav { padding: 20px 0; border-bottom: 1px solid var(--border); }
 nav .container { display: flex; align-items: center; justify-content: space-between; }
 .logo { font-size: 1.25rem; font-weight: 700; letter-spacing: -0.5px; color: var(--fg); display: flex; align-items: center; gap: 8px; text-decoration: none; }
 .logo span { color: var(--accent); }
@ -50,15 +47,14 @@ footer .container { display: flex; justify-content: space-between; align-items:
  footer .container { flex-direction: column; text-align: center; }
  .nav-links { gap: 16px; }
 }
-
-.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
-.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; text-decoration: none; }
+/* Skip to content */
+.skip-link { position: absolute; top: -100%; left: 16px; background: var(--accent); color: #0b0d11; padding: 8px 16px; border-radius: 0 0 8px 8px; font-weight: 600; font-size: 0.9rem; z-index: 200; transition: top 0.2s; }
 .skip-link:focus { top: 0; }
 </style>
 </head>
 <body>
+<a href="#main" class="skip-link">Skip to content</a>

-<a href="#main-content" class="skip-link">Skip to main content</a>
 <nav aria-label="Main navigation">
  <div class="container">
    <a href="/" class="logo">⚡ Doc<span>Fast</span></a>
@ -70,7 +66,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
  </div>
 </nav>

-<main id="main-content">
+<main id="main">
  <div class="container">
    <h1>Terms of Service</h1>
    <p><em>Last updated: February 16, 2026</em></p>
@ -149,7 +145,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <ul>
      <li><strong>Target:</strong> 99.5% uptime (best effort, no SLA for free tier)</li>
      <li><strong>Maintenance:</strong> Scheduled maintenance with advance notice</li>
-      <li><strong>Status page:</strong> <a href="/status">https://docfast.dev/status</a></li>
+      <li><strong>Status page:</strong> <a href="/health">https://docfast.dev/health</a></li>
    </ul>

    <h3>5.2 Performance</h3>
@ -261,7 +257,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/status">API Status</a>
+      <a href="/health">API Status</a>
+      <a href="mailto:support@docfast.dev">Support</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/src/index.ts
+++ b/src/index.ts
@ -54,7 +54,7 @@ app.use(compression());
 app.use((req, res, next) => {
  const isAuthBillingRoute = req.path.startsWith('/v1/signup') || 
                             req.path.startsWith('/v1/recover') || 
-                             req.path.startsWith('/v1/billing') ||
+                             req.path.startsWith('/v1/billing');
  
  if (isAuthBillingRoute) {
    res.setHeader("Access-Control-Allow-Origin", "https://docfast.dev");
@ -184,12 +184,17 @@ app.get("/favicon.ico", (_req, res) => {
  res.sendFile(path.join(__dirname, "../public/favicon.svg"));
 });

-app.use(express.static(path.join(__dirname, "../public"), { 
-  maxAge: "1d", 
-  etag: true,
-  setHeaders: (res) => {
-    res.setHeader('Cache-Control', 'public, max-age=86400');
+// Static asset cache headers middleware
+app.use((req, res, next) => {
+  if (/\.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$/.test(req.path)) { console.log("CACHE HIT:", req.path);
+    res.setHeader('Cache-Control', 'public, max-age=604800, immutable');
  }
+  next();
+});
+
+app.use(express.static(path.join(__dirname, "../public"), { 
+  etag: true,
+  cacheControl: false,
 }));

 // Docs page (clean URL)
--- a/src/services/email.ts
+++ b/src/services/email.ts
@ -1,20 +1,33 @@
 import nodemailer from "nodemailer";
 import logger from "./logger.js";

-const transporter = nodemailer.createTransport({
-  host: process.env.SMTP_HOST || "host.docker.internal",
-  port: Number(process.env.SMTP_PORT || 25),
-  secure: false,
+const smtpUser = process.env.SMTP_USER;
+const smtpPass = process.env.SMTP_PASS;
+const smtpHost = process.env.SMTP_HOST || "host.docker.internal";
+const smtpPort = Number(process.env.SMTP_PORT || 25);
+const smtpFrom = process.env.SMTP_FROM || "DocFast <noreply@docfast.dev>";
+const smtpSecure = smtpPort === 465;
+
+const transportConfig: any = {
+  host: smtpHost,
+  port: smtpPort,
+  secure: smtpSecure,
  connectionTimeout: 5000,
  greetingTimeout: 5000,
  socketTimeout: 10000,
  tls: { rejectUnauthorized: false },
-});
+};
+
+if (smtpUser && smtpPass) {
+  transportConfig.auth = { user: smtpUser, pass: smtpPass };
+}
+
+const transporter = nodemailer.createTransport(transportConfig);

 export async function sendVerificationEmail(email: string, code: string): Promise<boolean> {
  try {
    const info = await transporter.sendMail({
-      from: "DocFast <noreply@docfast.dev>",
+      from: smtpFrom,
      to: email,
      subject: "DocFast - Verify your email",
      text: `Your DocFast verification code is: ${code}\n\nThis code expires in 15 minutes.\n\nIf you didn't request this, ignore this email.`,