3b5d102d21
gitea (STARTTLS + FORCE_TRUST_SERVER_CERT) and rallly (Nodemailer STARTTLS + SMTP_REJECT_UNAUTHORIZED=false) wired. Fixed rallly's non-existent 3.12.1 pin → 3.11.2. calcom/nextcloud/immich don't fit the mechanism (self-signed opportunistic-STARTTLS, split From, no-SMTP-env) — see FINDING doc in felhom.eu. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>