feat: add SMTP auth support for K3s migration

- Support SMTP_USER/SMTP_PASS env vars for authenticated SMTP
- Support SMTP_FROM env var for configurable sender address
- Auto-detect secure mode for port 465
- Backwards compatible: falls back to unauthenticated local relay

dist/index.js

@@ -12,7 +12,6 @@ import { healthRouter } from "./routes/health.js";
 import { signupRouter } from "./routes/signup.js";
 import { recoverRouter } from "./routes/recover.js";
 import { billingRouter } from "./routes/billing.js";
-import { emailChangeRouter } from "./routes/email-change.js";
 import { authMiddleware } from "./middleware/auth.js";
 import { usageMiddleware, loadUsageData } from "./middleware/usage.js";
 import { getUsageStats } from "./middleware/usage.js";
@@ -49,8 +48,7 @@ app.use(compression());
 app.use((req, res, next) => {
     const isAuthBillingRoute = req.path.startsWith('/v1/signup') ||
         req.path.startsWith('/v1/recover') ||
-        req.path.startsWith('/v1/billing') ||
-        req.path.startsWith('/v1/email-change');
+        req.path.startsWith('/v1/billing');
     if (isAuthBillingRoute) {
         res.setHeader("Access-Control-Allow-Origin", "https://docfast.dev");
     }
@@ -85,7 +83,6 @@ app.use("/health", healthRouter);
 app.use("/v1/signup", signupRouter);
 app.use("/v1/recover", recoverRouter);
 app.use("/v1/billing", billingRouter);
-app.use("/v1/email-change", emailChangeRouter);
 // Authenticated routes — conversion routes get tighter body limits (500KB)
 const convertBodyLimit = express.json({ limit: "500kb" });
 app.use("/v1/convert", convertBodyLimit, authMiddleware, usageMiddleware, pdfRateLimitMiddleware, convertRouter);
@@ -171,12 +168,17 @@ app.get("/favicon.ico", (_req, res) => {
     res.setHeader('Cache-Control', 'public, max-age=604800');
     res.sendFile(path.join(__dirname, "../public/favicon.svg"));
 });
-app.use(express.static(path.join(__dirname, "../public"), {
-    maxAge: "1d",
-    etag: true,
-    setHeaders: (res) => {
-        res.setHeader('Cache-Control', 'public, max-age=86400');
+// Static asset cache headers middleware
+app.use((req, res, next) => {
+    if (/\.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$/.test(req.path)) {
+        console.log("CACHE HIT:", req.path);
+        res.setHeader('Cache-Control', 'public, max-age=604800, immutable');
     }
+    next();
+});
+app.use(express.static(path.join(__dirname, "../public"), {
+    etag: true,
+    cacheControl: false,
 }));
 // Docs page (clean URL)
 app.get("/docs", (_req, res) => {
@@ -196,10 +198,6 @@ app.get("/terms", (_req, res) => {
     res.setHeader('Cache-Control', 'public, max-age=86400');
     res.sendFile(path.join(__dirname, "../public/terms.html"));
 });
-app.get("/change-email", (_req, res) => {
-    res.setHeader('Cache-Control', 'public, max-age=3600');
-    res.sendFile(path.join(__dirname, "../public/change-email.html"));
-});
 app.get("/status", (_req, res) => {
     res.setHeader("Cache-Control", "public, max-age=60");
     res.sendFile(path.join(__dirname, "../public/status.html"));