{
  // SMTP submission server
  "smtpAddr": ":587",
  "domain": "atmos.email",

  // Inbound SMTP for bounce processing
  "inboundAddr": ":25",

  // Admin API (Tailscale-only recommended)
  "adminAddr": ":8080",
  // adminToken: set via ADMIN_TOKEN env var (never in config file)

  // Labeler XRPC URL for label checks
  "labelerURL": "https://your-labeler.example.com",

  // TLS (Let's Encrypt or manual cert)
  "tlsCertFile": "",
  "tlsKeyFile": "",

  // Storage
  "stateDir": "/var/lib/atmos-relay",

  // Rate limits (per-member defaults)
  "hourlyLimit": 100,
  "dailyLimit": 1000,
  "globalPerMinute": 500,

  // Osprey integration (optional — leave both empty to disable)
  "kafkaBroker": "",
  "ospreyURL": ""
}