.env.example

@@ -86,6 +86,25 @@ FN_SMTP_FROM=
 # reset link crossing a network in the clear.
 FN_SMTP_TLS=true
 
+# Require an account to prove its email address before this relay will issue it
+# a token — that is, before it can send anything. Off by default.
+#
+# ⚠️ **This belongs next to SMTP because it needs SMTP.** Enforcement is
+# `required AND canSendMail`, so setting this on a relay with no mail configured
+# does nothing at all — deliberately, since an account that cannot be sent a
+# code could never spend one, and locking somebody out of their own server would
+# be the worst possible reading of a security feature.
+#
+# The trade is friction at exactly the moment somebody is deciding whether to
+# bother, which is why it gates SENDING rather than signing up: an account is
+# created immediately and proves itself before it can reach anyone.
+#
+# Accounts authenticated by the shared FlameNet service are unaffected — they
+# have no local email and nothing to prove to this relay.
+#
+# Accepts true, 1 or yes. Anything else, including a typo, leaves it off.
+FN_EMAIL_VERIFICATION_REQUIRED=false
+
 # ---------------------------------------------------------------------------
 # New accounts per IP per hour. Default 50.
 #