feat: import selected fork operational fixes

docs/deployment/configuration.md

@@ -62,6 +62,7 @@ For database operations, use the [Database Backup and Restore](backups.md) guide
 | `IMAP_FOLDER` | IMAP folder to check | `INBOX` | `DMARC`, `reports` |
 | `IMAP_MARK_AS_READ` | Mark processed emails as read | `true` | `true`, `false` |
 | `IMAP_ARCHIVE_FOLDER` | Folder to move processed emails to | - | `Processed`, `Archive` |
+| `DELETE_IMPORTED_EMAILS` | Delete IMAP emails after a DMARC report is successfully imported | `false` | `true`, `false` |
 
 ### Application Settings
 
@@ -108,6 +109,7 @@ policy if long-term storage size matters.
 | `CF_ENABLED` | Enable Cloudflare integration | `false` | `true`, `false` |
 | `CF_API_TOKEN` | Cloudflare API token | - | `your_cloudflare_api_token` |
 | `CF_ZONE_ID` | Cloudflare Zone ID | - | `your_cloudflare_zone_id` |
+| `WEBHOOK_SECRET` | Required secret for inbound email worker webhooks | - | `openssl rand -hex 32` |
 
 ### DNS Result Cache
 

docs/deployment/docker.md

@@ -45,9 +45,11 @@ The fastest way to get DMARQ running is to use Docker Compose:
    # IMAP_PASSWORD=your_secure_password
    # IMAP_USE_SSL=true
    # IMAP_POLLING_INTERVAL=60
+   # DELETE_IMPORTED_EMAILS=false
 
    # Security Settings
    SECRET_KEY=generate_a_secure_random_key
+   # WEBHOOK_SECRET=generate_a_separate_webhook_secret
    ALLOWED_HOSTS=localhost,127.0.0.1
    ```
 
@@ -104,7 +106,9 @@ services:
       - IMAP_PASSWORD=${IMAP_PASSWORD:-}
       - IMAP_USE_SSL=${IMAP_USE_SSL:-true}
       - IMAP_POLLING_INTERVAL=${IMAP_POLLING_INTERVAL:-60}
+      - DELETE_IMPORTED_EMAILS=${DELETE_IMPORTED_EMAILS:-false}
       - SECRET_KEY=${SECRET_KEY:-insecure_key_change_me_in_production}
+      - WEBHOOK_SECRET=${WEBHOOK_SECRET:-}
       - ALLOWED_HOSTS=${ALLOWED_HOSTS:-localhost,127.0.0.1}
     depends_on:
       - db