Settings

Email delivery, security report thresholds, scheduled job auth, and operation presets. Use the links to jump — sections stay in one page so you can compare readiness with the forms below.

Overview

Ready

Credential sealing

AES-256-GCM for connection and panel secrets. Required to save API keys in the UI.

Ready

Scheduled & live-day email

Matches the delivery method selected below (SMTP_CONNECTOR).

Action needed

HTTP cron auth

External schedulers call the sends route with Bearer CRON_SECRET.

Worker online

SMTP connector worker

Heartbeat and job queue health when SMTP connector delivery is selected.

Email delivery

One active method: MailerSend/Resend, C# SMTP connector (outbound to this app), or Direct SMTP. Non-secrets live in the database; tokens and passwords are sealed when encryption is enabled.Instance monitor — connector heartbeat, persisted scheduler ticks, and recent send logs.

Pick one active delivery method. Non-secret values are stored in the database. API tokens, connector secret, and SMTP password are sealed with EPOS_ENCRYPTION_KEY when you save them (required to store secrets in the panel).

Delivery method

MailerSend / ResendCloud API from this Node process. Configure tokens in the section below or via environment variables.SMTP Connector (C# worker)The worker connects outbound to this app (/api/smtp-connector/*), pulls mail jobs, downloads SMTP relay settings from the project, and sends mail. Configure the shared secret below and the relay under Direct SMTP relay.Direct SMTPThis application sends mail via nodemailer using the relay settings below or environment variables.

From addresses

Applies to all methods. Overrides REPORT_EMAIL_FROM and HOURLY_REPORT_FROM when set. Leave blank to use env only.

Live-day / report From

Legacy hourly From

Hourly report email

Footer text at the bottom of hourly HTML emails (below the outlet table when shown). Leave blank for the default line (Figures from your EPOS · plus the event timezone). Multiple lines are allowed. Insert the timezone anywhere with {{timezone}}.

Footer message

Method-specific configuration

Expand the panel for the provider you use. The open panel matches your current selection — change method above, then save.

Worker statusOnline

Last heartbeat: 2026-04-13 15:28:45 UTC

The worker must be configured with this app's HTTPS base URL and the same shared secret (panel or SMTP_CONNECTOR_SECRET). It calls POST /api/smtp-connector/smtp-relay to load relay settings from Direct SMTP relay below, then polls for jobs.

Last worker report (JSON)

{
  "v": 1,
  "displayName": "frog2",
  "machineName": "K-ASCYT-409",
  "relayCached": true,
  "workerVersion": "2.1.4"
}

Connector shared secretClear saved connector secret

Clear legacy inbound push URL + key (obsolete; safe to remove if you migrated)

Lease seconds (job claim)

Online threshold (seconds)

Panel values override SMTP_HOST, SMTP_PORT, and related variables when set. When SMTP Connector is selected, this relay is exposed to the worker over HTTPS (authenticated) — use TLS on your app and restrict network access to the worker.

SMTP host

Port

Implicit TLS (SMTPS)

Username (optional)

Password (optional)Clear saved SMTP password

TLS verify server certificate

Credential sealing: ready to store secrets

Delivery readiness

Checklist for the currently selected delivery method. Fix red items in the email panel above or via environment variables.

Ready

Active method: SMTP_CONNECTOR

Report & live-day From address
Resolved from panel or REPORT_EMAIL_FROM / HOURLY_REPORT_FROM.
Connector shared secret
Bearer secret is set — the C# worker uses it for all connector API calls.

Scheduled sends authentication

HTTP cron must call the sends endpoint with Authorization: Bearer CRON_SECRET.

Action needed

Set CRON_SECRET in .env. See .env.example for a generator command.

Security / profit protection report

Alert thresholds and void order-type IDs for the Security report (voids, cancels, refunds by outlet and terminal).

Operation name presets

Reusable labels when adding an operation to an event (for example Retail, Hospitality). Presets only set the name — outlets are chosen per event.

Retail Outlets
Standard Retail Outlets