Keep email runtime configuration out of Vault

2026-09-12 23:45:58 +02:00
1 parent 9d57a65010
commit 1fe173397f
@@ -181,3 +181,5 @@ belong to the receiving service at `services/<service>/callers/<caller>`.
 Use Caddy for local browser HTTPS and certificate management. Treat the private
 local Docker network as trusted; do not add internal gRPC TLS or Vault-managed
 local TLS certificates without an explicit requirement.
+Store only secret values in Vault. Driver selection, sender identities, endpoints
+and other non-secret runtime settings belong in service configuration files.