From 54f9a5de15322d79a688777b69b4fd57ad0e0271 Mon Sep 17 00:00:00 2001
From: Bubka <858858+Bubka@users.noreply.github.com>
Date: Tue, 5 Dec 2023 17:26:34 +0100
Subject: [PATCH] Update MAIL_VERIFY_SSL_PEER comment & Add it where missing

---
 .env.example              | 11 ++++++++++-
 Dockerfile                |  6 ++++++
 docker/docker-compose.yml |  6 ++++++
 3 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index 47bf8b2a..01fa345c 100644
--- a/.env.example
+++ b/.env.example
@@ -127,9 +127,18 @@ MAIL_PASSWORD=null
 MAIL_ENCRYPTION=null
 MAIL_FROM_NAME=null
 MAIL_FROM_ADDRESS=null
-# Set MAIL_VERIFY_SSL_PEER=false if not using SSL for email
+
+
+# SSL peer verification.
+# Set this to false to disable the SSL certificate validation.
+#
+# WARNING
+# Disabling peer verification can result in a major security flaw.
+# Change it only if you know what you're doing.
+
 MAIL_VERIFY_SSL_PEER=true
 
+
 #### API settings ####
 
 # The maximum number of API calls in a minute from the same IP.
diff --git a/Dockerfile b/Dockerfile
index a65ab317..8067afbb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -155,6 +155,12 @@ ENV \
     MAIL_ENCRYPTION=null \
     MAIL_FROM_NAME=null \
     MAIL_FROM_ADDRESS=null \
+    # SSL peer verification.
+    # Set this to false to disable the SSL certificate validation.
+    # WARNING
+    # Disabling peer verification can result in a major security flaw.
+    # Change it only if you know what you're doing.
+    MAIL_VERIFY_SSL_PEER=true \
     # API settings
     # The maximum number of API calls in a minute from the same IP.
     # Once reached, all requests from this IP will be rejected until the minute has elapsed.
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 063618bd..790e1b1a 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -53,6 +53,12 @@ services:
       - MAIL_ENCRYPTION=null
       - MAIL_FROM_NAME=null
       - MAIL_FROM_ADDRESS=null
+      # SSL peer verification.
+      # Set this to false to disable the SSL certificate validation.
+      # WARNING
+      # Disabling peer verification can result in a major security flaw.
+      # Change it only if you know what you're doing.
+      - MAIL_VERIFY_SSL_PEER=true
       # API settings
       # The maximum number of API calls in a minute from the same IP.
       # Once reached, all requests from this IP will be rejected until the minute has elapsed.