added insecure email backend for self signed certs

.env.example

@@ -20,11 +20,16 @@ CORS_ALLOWED_ORIGINS=https://holy.narl.io
 
 # --- SMTP Configuration (Required for Email Verification) ---
 # For development, if EMAIL_HOST is empty, emails are printed to the console.
-EMAIL_HOST=smtp.gmail.com
-EMAIL_PORT=465
-EMAIL_USE_SSL=true
-EMAIL_HOST_USER="your-email@gmail.com"
-EMAIL_HOST_PASSWORD="your-app-specific-password"
+EMAIL_HOST=localhost
+EMAIL_PORT=587
+# Use EMAIL_USE_TLS=true for STARTTLS (usually port 587)
+EMAIL_USE_TLS=true
+# Use EMAIL_USE_SSL=true for implicit SSL (usually port 465)
+EMAIL_USE_SSL=false
+EMAIL_HOST_USER="your-email@example.com"
+EMAIL_HOST_PASSWORD="your-password"
+# Set to 'true' if using a self-signed certificate (e.g. local SMTP server)
+EMAIL_SKIP_CERT_VERIFICATION=false
 
 # --- Frontend Configuration ---
 # The base URL of the backend API (MUST end with /api/)