- mailer config: smtp+starttls to smtp.gmail.com:587 - SMTP creds via forgejo-smtp secret (SOPS-encrypted, Gmail App Password) - Env var injection: GITEA__MAILER__USER/PASSWD from secret - Enables CI completion emails, password reset, repo notifications