Secret: SMTP_USER / SMTP_PASSWORD

Purpose: Email provider credentials.

Source: GitHub Secrets → Kratos courier

Rotation runbook: [provider dashboard](provider dashboard)

How it's used

Loaded at container startup. Failure to read the secret usually causes a fatal startup error.

How to rotate

See the linked runbook above. Most secrets have a documented zero-downtime rotation procedure.

Related

• Security, Secrets management, full inventory.
• Operate, Secrets audit, quarterly cadence.