Added email functionality

README.md

@@ -175,10 +175,20 @@ The main configurable values are:
 | `LINKLOG_SECRET_KEY` | token signing/security secret | required in Docker |
 | `LINKLOG_DATABASE_PATH` | SQLite file path inside the container | `/app/backend/data/linklog.db` |
 | `LINKLOG_TOKEN_EXPIRY_DAYS` | access-token lifetime | `30` |
+| `LINKLOG_PUBLIC_URL` | Base URL used in email verification links | `http://localhost:8000` |
+| `LINKLOG_SMTP_HOST` | SMTP server hostname; empty disables delivery in local development | empty |
+| `LINKLOG_SMTP_PORT` | SMTP server port | `587` |
+| `LINKLOG_SMTP_USERNAME` | SMTP login username | empty |
+| `LINKLOG_SMTP_PASSWORD` | SMTP login password | empty |
+| `LINKLOG_SMTP_FROM` | Sender address for verification mail | `LinkLog <no-reply@localhost>` |
+| `LINKLOG_SMTP_USE_TLS` | Use STARTTLS for SMTP | `true` |
+| `LINKLOG_EMAIL_VERIFICATION_EXPIRY_HOURS` | Verification-link lifetime | `24` |
 | `LINKLOG_TRACKING_PARAMS` | comma-separated tracking parameters (stripped from logged URLs) | built-in list |
 | `TRAEFIK_HOST` | hostname routed by Traefik | `localhost` |
 | `APP_PORT` | direct host port for FastAPI | `8000` |
 
+New users created by an administrator are email-unverified and cannot sign in until they follow the verification link sent to their address. The link is valid for `LINKLOG_EMAIL_VERIFICATION_EXPIRY_HOURS` hours and is handled by `/api/auth/verify-email`. Configure `LINKLOG_SMTP_HOST`, `LINKLOG_SMTP_FROM`, and the SMTP credentials for delivery; local development may leave the SMTP host empty, in which case accounts remain pending verification and no message is sent.
+
 The full set of supported variables is listed in `.env.example`. Application variables are passed into the container by Compose; Docker and Traefik variables are used by Compose itself.
 
 Build and start the application and local Traefik proxy: