I recently went through the emails:task and related code with the aim of testing each of the failure codepaths and touching up the error text. I also discovered that the effects of setting DISCOURSE_SMTP_ENABLE_START_TLS=false are (mostly) nil. Setting this didn’t actually disable STARTTLS and in f…

No, this alert shouldn’t show up on our hosting. We’ll fix it, thanks for the report as always.

[image] supermathie: Before I merge this though, I think an admin warning in the dashboard for when DISCOURSE_SMTP_ENABLE_STARTTLS=false is being set is suitable. @supermathie is this worth PMing every admin on every site that has this variable set? Our current problem checks system will do t…

I think it is - I find it extremely likely that given how confused many admins are around email setup, someone has this variable set when they actually depend on starttls. Nobody should have it set, probably. Is rather have a spurious warning than silently break someone’s email setup. The alterna…

It would be nice if the warning didn’t show up when the outgoing SMTP server is the localhost (ie matches the Discourse domain name) as TLS between the Docker container and the host isn’t needed as they are the same machine.

In this case you should remove the variable from the environment. Discourse will only use STARTTLS if it’s offered.

Ich hatte in der aktuellen Version den Fall - das die auskommentierte Zeile (default ist true) zusammen mit force_tls den eMail Versand unterbunden hat. Ich habe sie also einkommentiert und sie auf false gesetzt. EMail Versand funktioniert nun - aber ich habe diese Meldung im Backend… Es hängt ein …

I also noticed this. After updating Discourse on 28 November, I started seeing mail delivery failures with the error message Job exception: :enable_starttls and :tls are mutually exclusive. Set :tls if you're on an SMTPS connection. Set :enable_starttls if you're on an SMTP connection and using STAR…

[image] josy38: together with force_tls prevented email sending It will be force_tls preventing email sending - this enforces TLS at connection time and is probably only suitable for port 465. [image] J5lx: But now I have to explicitly set DISCOURSE_SMTP_ENABLE_START_TLS to false for ema…

Port 465 with ENABLE_START_TLS=false, FORCE_TLS=true and OPEN_TIMEOUT=10. That last one is due to strange timeout errors that I started seeing after a system update around three years ago, but I’ll eat my hat if that’s related to the issue described above. I had a look at the commit history in the …

[image] J5lx: DISCOURSE_SMTP_FORCE_TLS Wie ich schrieb - habe ich force_TLS gesetzt: `DISCOURSE_SMTP_FORCE_TLS = true` und ENABLE_START_TLS explizit auf false… dann funktioniert der Mailversand - sofern der Mailserver auf 465 läuft. Bei Mailservern die auf 567 laufen - muss es genau anders…

Reworking the emails:test rake task output

Development

supermathie (Michael Brown) December 15, 2025, 10:01pm 17

In the interest of trying to have people do less configuration, not more, I think this approach is best:

https://github.com/discourse/discourse/pull/36706

Topic		Replies	Views
SSL/TLS for port 465 (Net::ReadTimeout) - undocumented solution Self-hosting email	2	751	November 11, 2025
SMTP error: Must issue a STARTTLS command first Self-hosting	9	3514	November 23, 2021
Email not working (SSL_connect returned=1) Self-hosting	15	2647	June 15, 2022
Can't send email with certificate issue Self-hosting	2	1583	April 2, 2019
Discourse with other websites, SMTP issue: End of file reached Self-hosting	7	2409	September 22, 2020

Reworking the emails:test rake task output

Related topics