Email Setup: SMTP and Provider APIs
Set up outgoing email for Tymeslot via SMTP or a provider API. Covers booking confirmations, reminders, and password resets. Includes steps for Gmail, Amazon SES, SendGrid, Mailgun, and AhaSend.
Send Tymeslot's booking and account emails through Postmark, with per-message delivery and bounce tracking.
Aggiornato il 23 giugno 2026
.env
file
By the end of this guide, Tymeslot sends all its email through Postmark, and you can see the delivery status and any bounce for every message.
Generic SMTP works, but once Tymeslot hands an email off, you cannot see what happened to it. Postmark is a transactional email service built for the booking confirmations and notifications Tymeslot sends, and it shows whether each message was delivered, bounced or marked as spam.
A Postmark Server holds your API token, message streams and delivery history. Create one per Tymeslot environment (for example, one for production and one for staging).
Postmark will not deliver email from an unverified domain. Verifying the domain also turns on DKIM signing, which makes your email far less likely to land in spam.
EMAIL_FROM_ADDRESS=noreply@acme.com, enter acme.com.
EMAIL_FROM_ADDRESS
to that address for initial testing, then switch to a domain signature once verified.
Open your .env
file (or your hosting platform's environment variable settings) and set the following, using the Server API Token you copied in Step 3.
EMAIL_ADAPTER=postmark
EMAIL_FROM_NAME="Acme Corp"
EMAIL_FROM_ADDRESS=noreply@acme.com
POSTMARK_API_KEY=your-server-api-token
| Variable | Purpose |
|---|---|
| EMAIL_ADAPTER |
Must be postmark
to send through Postmark's API instead of SMTP.
|
| EMAIL_FROM_NAME | The display name recipients see in their inbox, such as "Acme Corp". Wrap it in quotes if it contains spaces. |
| EMAIL_FROM_ADDRESS | Must belong to a domain or signature that is fully verified in Postmark. |
| POSTMARK_API_KEY | The Server API Token from Step 3. Do not use an Account API Token. |
Tymeslot reads environment variables at startup. Save your
.env
file and restart the application; changes take effect only after a restart. With Docker Compose, run docker compose up -d, which recreates the container with the new values; a plain restart keeps the old ones.
Once Tymeslot is back up, trigger a test email: go to your Tymeslot sign-in page and click Forgot password?. Enter your account email address and submit.
The password reset email should arrive within a few seconds. Meanwhile, open your server's [Activity] tab in the Postmark dashboard to watch the message appear as Postmark processes it.
If you get a 422 "Sender signature not found" error
The domain in your
EMAIL_FROM_ADDRESS
is not verified in Postmark. Go back to Step 4 and check that the DKIM and Return-Path records both show as verified, then try again.
If emails only reach addresses on your own domain
Until Postmark approves a new account, it only delivers to addresses on the same domain as your verified sender signatures. Request account approval from the Postmark dashboard to send to any recipient.
The Activity tab inside your Postmark server is where you check delivery. It lists every email Tymeslot has sent, with a timeline for each message.
For each email you can see the recipient, the subject, when Tymeslot submitted it, when the recipient's mail server accepted it, and the bounce reason if delivery failed. Tymeslot turns open and click tracking off for booking and account emails, so those messages show no open events.
Check the Activity tab after your first real bookings go out. A hard bounce means the address is invalid, and Postmark stops sending to it. A soft bounce is a temporary failure, and Postmark retries it.
Postmark has two token types, and Tymeslot needs the server one. The Server API Token belongs to a single Postmark server and can only send email and read activity for that server. The Account API Token lives in your account settings and can manage servers, domains and sender signatures across the whole account.
Tymeslot sends with the Server API Token; an Account API Token is rejected when sending. Find the Server Token inside your server under the [API Tokens] tab.
If Tymeslot handed the email to Postmark successfully, the problem lies after that hand-off. Open the [Activity] tab inside your Postmark server, where every outbound message has a delivery timeline.
Look for soft bounces (temporary failures that Postmark retries), hard bounces (permanent failures, usually an invalid address) or spam complaints. If messages show as Delivered in Postmark but do not appear in the inbox, check the recipient's spam or junk folder, and confirm DKIM is verified for your domain.
Yes. Postmark only sends from a verified domain or a verified single-address sender signature, and a domain is the practical choice for production.
Verifying the domain also turns on DKIM signing; without DKIM, more of your email lands in spam whatever its content. Follow Step 4 to add the DKIM TXT record and Return-Path CNAME that Postmark gives you. Once both show as verified, the domain is ready.
Yes. Create a separate Postmark server with the delivery type set to Sandbox and use its Server API Token: Postmark accepts and logs every message but never delivers it, so you can test without emailing real people.
Separately, until Postmark approves a new account, a Live server only delivers to addresses on the same domain as your verified sender signatures. Request approval from the Postmark dashboard before you take bookings from the public.
In the Postmark dashboard, go to Servers and select the server you created for Tymeslot. Inside the server, click the [API Tokens] tab in the top navigation. The Server API Token is near the top of that page: click Show if it is hidden, then Copy to copy it to your clipboard.
If you cannot find the API Tokens tab, you are probably at the account level, which shows the server list. Click into a server first.
EMAIL_FROM_NAME
and EMAIL_FROM_ADDRESS, not a Postmark default.
Set up outgoing email for Tymeslot via SMTP or a provider API. Covers booking confirmations, reminders, and password resets. Includes steps for Gmail, Amazon SES, SendGrid, Mailgun, and AhaSend.