feat(server): email notifications (#8447)

* feat(server): add `react-mail` as mail template engine and `nodemailer` * feat(server): add `smtp` related configs to `SystemConfig` * feat(web): add page for SMTP settings * feat(server): add `react-email.adapter` This adapter render the React-Email into HTML and plain/text email. The output is set as the body of the email. * feat(server): add `MailRepository` and `MailService` Allow to use the NestJS-modules-mailer module to send SMTP emails. This is the base transport for the `NotificationRepository` * feat(server): register the job dispatcher and Job for async email This allows to queue email sending jobs for the `EmailService`. * feat(server): add `NotificationRepository` and `NotificationService` This act as a middleware to properly route the notification to the right transport. As POC I've only implemented a simple SMTP transport. * feat(server): add `welcome` email template * feat(server): add the first notification on `createUser` in `UserService` This trigger an event for the `NotificationRepository` that once processes by using the global config and per-user config will carry the payload to the right notification transport. * chore: clean up * chore: clean up web * fix: type errors" * fix package lock * fix mail sending, option to ignore certs * chore: open api * chore: clean up * remove unused import * feat: email feature flag * chore: remove unused interface * small styling --------- Co-authored-by: Jason Rasmussen <jrasm91@gmail.com> Co-authored-by: Daniel Dietzler <mail@ddietzler.dev> Co-authored-by: Alex Tran <alex.tran1502@gmail.com>
2025-12-21 01:11:16 +03:00 · 2024-05-02 16:43:18 +02:00
parent 4b86c7a298
commit 9bce3417e9
60 changed files with 6499 additions and 371 deletions
--- a/server/src/cores/system-config.core.ts
+++ b/server/src/cores/system-config.core.ts
@@ -61,6 +61,7 @@ export const defaults = Object.freeze<SystemConfig>({
    [QueueName.MIGRATION]: { concurrency: 5 },
    [QueueName.THUMBNAIL_GENERATION]: { concurrency: 5 },
    [QueueName.VIDEO_CONVERSION]: { concurrency: 1 },
+    [QueueName.NOTIFICATION]: { concurrency: 5 },
  },
  logging: {
    enabled: true,
@@ -145,6 +146,20 @@ export const defaults = Object.freeze<SystemConfig>({
    externalDomain: '',
    loginPageMessage: '',
  },
+  notifications: {
+    smtp: {
+      enabled: false,
+      from: '',
+      replyTo: '',
+      transport: {
+        ignoreCert: false,
+        host: '',
+        port: 587,
+        username: '',
+        password: '',
+      },
+    },
+  },
  user: {
    deleteDelay: 7,
  },
@@ -162,6 +177,7 @@ export enum FeatureFlag {
  PASSWORD_LOGIN = 'passwordLogin',
  CONFIG_FILE = 'configFile',
  TRASH = 'trash',
+  EMAIL = 'email',
 }

 export type FeatureFlags = Record<FeatureFlag, boolean>;
@@ -243,6 +259,7 @@ export class SystemConfigCore {
      [FeatureFlag.OAUTH_AUTO_LAUNCH]: config.oauth.autoLaunch,
      [FeatureFlag.PASSWORD_LOGIN]: config.passwordLogin.enabled,
      [FeatureFlag.CONFIG_FILE]: !!process.env.IMMICH_CONFIG_FILE,
+      [FeatureFlag.EMAIL]: config.notifications.smtp.enabled,
    };
  }

--- a/server/src/dtos/job.dto.ts
+++ b/server/src/dtos/job.dto.ts
@@ -84,4 +84,7 @@ export class AllJobStatusResponseDto implements Record<QueueName, JobStatusDto>

  @ApiProperty({ type: JobStatusDto })
  [QueueName.LIBRARY]!: JobStatusDto;
+
+  @ApiProperty({ type: JobStatusDto })
+  [QueueName.NOTIFICATION]!: JobStatusDto;
 }
--- a/server/src/dtos/server-info.dto.ts
+++ b/server/src/dtos/server-info.dto.ts
@@ -108,6 +108,7 @@ export class ServerFeaturesDto implements FeatureFlags {
  passwordLogin!: boolean;
  sidecar!: boolean;
  search!: boolean;
+  email!: boolean;
 }

 export interface ReleaseNotification {
--- a/server/src/dtos/system-config.dto.ts
+++ b/server/src/dtos/system-config.dto.ts
@@ -1,6 +1,7 @@
 import { ApiProperty } from '@nestjs/swagger';
 import { Type } from 'class-transformer';
 import {
+  IsBoolean,
  IsEnum,
  IsInt,
  IsNotEmpty,
@@ -43,6 +44,7 @@ class CronValidator implements ValidatorConstraintInterface {
 const isLibraryScanEnabled = (config: SystemConfigLibraryScanDto) => config.enabled;
 const isOAuthEnabled = (config: SystemConfigOAuthDto) => config.enabled;
 const isOAuthOverrideEnabled = (config: SystemConfigOAuthDto) => config.mobileOverrideEnabled;
+const isEmailNotificationEnabled = (config: SystemConfigSmtpDto) => config.enabled;

 export class SystemConfigFFmpegDto {
  @IsInt()
@@ -202,6 +204,12 @@ class SystemConfigJobDto implements Record<ConcurrentQueueName, JobSettingsDto>
  @IsObject()
  @Type(() => JobSettingsDto)
  [QueueName.LIBRARY]!: JobSettingsDto;
+
+  @ApiProperty({ type: JobSettingsDto })
+  @ValidateNested()
+  @IsObject()
+  @Type(() => JobSettingsDto)
+  [QueueName.NOTIFICATION]!: JobSettingsDto;
 }

 class SystemConfigLibraryScanDto {
@@ -358,6 +366,53 @@ class SystemConfigServerDto {
  loginPageMessage!: string;
 }

+class SystemConfigSmtpTransportDto {
+  @IsBoolean()
+  ignoreCert!: boolean;
+
+  @IsNotEmpty()
+  @IsString()
+  host!: string;
+
+  @IsNumber()
+  @Min(0)
+  @Max(65_535)
+  port!: number;
+
+  @IsString()
+  username!: string;
+
+  @IsString()
+  password!: string;
+}
+
+class SystemConfigSmtpDto {
+  @IsBoolean()
+  enabled!: boolean;
+
+  @ValidateIf(isEmailNotificationEnabled)
+  @IsNotEmpty()
+  @IsString()
+  @IsNotEmpty()
+  from!: string;
+
+  @IsString()
+  replyTo!: string;
+
+  @ValidateIf(isEmailNotificationEnabled)
+  @Type(() => SystemConfigSmtpTransportDto)
+  @ValidateNested()
+  @IsObject()
+  transport!: SystemConfigSmtpTransportDto;
+}
+
+class SystemConfigNotificationsDto {
+  @Type(() => SystemConfigSmtpDto)
+  @ValidateNested()
+  @IsObject()
+  smtp!: SystemConfigSmtpDto;
+}
+
 class SystemConfigStorageTemplateDto {
  @ValidateBoolean()
  enabled!: boolean;
@@ -512,6 +567,11 @@ export class SystemConfigDto implements SystemConfig {
  @IsObject()
  library!: SystemConfigLibraryDto;

+  @Type(() => SystemConfigNotificationsDto)
+  @ValidateNested()
+  @IsObject()
+  notifications!: SystemConfigNotificationsDto;
+
  @Type(() => SystemConfigServerDto)
  @ValidateNested()
  @IsObject()
--- a/server/src/dtos/user.dto.ts
+++ b/server/src/dtos/user.dto.ts
@@ -1,6 +1,6 @@
 import { ApiProperty } from '@nestjs/swagger';
 import { Transform } from 'class-transformer';
-import { IsEmail, IsEnum, IsNotEmpty, IsNumber, IsPositive, IsString, IsUUID } from 'class-validator';
+import { IsBoolean, IsEmail, IsEnum, IsNotEmpty, IsNumber, IsPositive, IsString, IsUUID } from 'class-validator';
 import { getRandomAvatarColor } from 'src/dtos/user-profile.dto';
 import { UserAvatarColor, UserEntity, UserStatus } from 'src/entities/user.entity';
 import { Optional, ValidateBoolean, toEmail, toSanitized } from 'src/validation';
@@ -34,6 +34,10 @@ export class CreateUserDto {

  @ValidateBoolean({ optional: true })
  shouldChangePassword?: boolean;
+
+  @Optional()
+  @IsBoolean()
+  notify?: boolean;
 }

 export class CreateAdminDto {
--- a/server/src/emails/welcome.email.tsx
+++ b/server/src/emails/welcome.email.tsx
@@ -0,0 +1,159 @@
+import {
+  Body,
+  Button,
+  Column,
+  Container,
+  Head,
+  Hr,
+  Html,
+  Img,
+  Link,
+  Preview,
+  Row,
+  Section,
+  Text,
+} from '@react-email/components';
+import * as CSS from 'csstype';
+import * as React from 'react';
+import { WelcomeEmailProps } from 'src/interfaces/notification.interface';
+
+export const WelcomeEmail = ({ baseUrl, displayName, username, password }: WelcomeEmailProps) => (
+  <Html>
+    <Head />
+    <Preview>You have been invited to a new Immich instance.</Preview>
+    <Body
+      style={{
+        margin: 0,
+        padding: 0,
+        backgroundColor: '#ffffff',
+        color: 'rgb(66, 80, 175)',
+        fontFamily: 'Overpass, sans-serif',
+        fontSize: '18px',
+        lineHeight: '24px',
+      }}
+    >
+      <Container
+        style={{
+          width: '480px',
+          maxWidth: '100%',
+          padding: '10px',
+          margin: '0 auto',
+        }}
+      >
+        <Section
+          style={{
+            padding: '36px',
+            tableLayout: 'fixed',
+            backgroundColor: 'rgb(226, 232, 240)',
+            border: 'solid 0px rgb(248 113 113)',
+            borderRadius: '50px',
+            textAlign: 'center' as const,
+          }}
+        >
+          <Img
+            src="https://immich.app/img/immich-logo-inline-light.png"
+            alt="Immich"
+            style={{
+              height: 'auto',
+              margin: '0 auto 48px auto',
+              width: '50%',
+              alignSelf: 'center',
+              color: 'white',
+            }}
+          />
+
+          <Text style={text}>
+            Hey <strong>{displayName}</strong>!
+          </Text>
+
+          <Text style={text}>A new account has been created for you.</Text>
+
+          <Text style={text}>
+            <strong>Username</strong>: {username}
+            {password && (
+              <>
+                <br />
+                <strong>Password</strong>: {password}
+              </>
+            )}
+          </Text>
+
+          <Row>
+            <Text style={{ ...text, marginBottom: '36px' }}>
+              To login, open the link in a browser, or click the button below.
+            </Text>
+          </Row>
+          <Row>
+            <Link style={{ marginTop: '50px' }} href={baseUrl}>
+              {baseUrl}
+            </Link>
+          </Row>
+          <Row>
+            <Button style={button} href={`${baseUrl}/auth/login`}>
+              Login
+            </Button>
+          </Row>
+        </Section>
+
+        <Hr style={{ color: 'rgb(66, 80, 175)', marginTop: '24px' }} />
+
+        <Section style={{ textAlign: 'center' }}>
+          <Row>
+            <Column align="center">
+              <Link href="https://play.google.com/store/apps/details?id=app.alextran.immich">
+                <Img src={`https://immich.app/img/google-play-badge.png`} height="96px" alt="Immich" />
+              </Link>
+              <Link href="https://apps.apple.com/sg/app/immich/id1613945652">
+                <Img
+                  // TODO get this as a png
+                  src={`https://immich.app/img/ios-app-store-badge.svg`}
+                  alt="Immich"
+                  style={{ height: '68px', padding: '14px' }}
+                />
+              </Link>
+            </Column>
+          </Row>
+        </Section>
+
+        <Text
+          style={{
+            color: '#6a737d',
+            fontSize: '0.8rem',
+            textAlign: 'center' as const,
+            marginTop: '12px',
+          }}
+        >
+          <Link href="https://immich.app">Immich</Link> project is available under GNU AGPL v3 license.
+        </Text>
+      </Container>
+    </Body>
+  </Html>
+);
+
+WelcomeEmail.PreviewProps = {
+  baseUrl: 'https://demo.immich.app/auth/login',
+  displayName: 'Alan Turing',
+  username: 'alanturing',
+  password: 'mysuperpassword',
+} as WelcomeEmailProps;
+
+export default WelcomeEmail;
+
+const text = {
+  margin: '0 0 24px 0',
+  textAlign: 'left' as const,
+  fontSize: '18px',
+  lineHeight: '24px',
+};
+
+const button: CSS.Properties = {
+  backgroundColor: 'rgb(66, 80, 175)',
+  margin: '1em 0',
+  padding: '0.75em 3em',
+  color: '#fff',
+  fontSize: '1em',
+  fontWeight: 700,
+  lineHeight: 1.5,
+  textTransform: 'uppercase',
+  borderRadius: '9999px',
+};
--- a/server/src/entities/system-config.entity.ts
+++ b/server/src/entities/system-config.entity.ts
@@ -80,6 +80,15 @@ export const SystemConfigKey = {
  MAP_LIGHT_STYLE: 'map.lightStyle',
  MAP_DARK_STYLE: 'map.darkStyle',

+  NOTIFICATIONS_SMTP_ENABLED: 'notifications.smtp.enabled',
+  NOTIFICATIONS_SMTP_FROM: 'notifications.smtp.from',
+  NOTIFICATIONS_SMTP_REPLY_TO: 'notifications.smtp.replyTo',
+  NOTIFICATIONS_SMTP_TRANSPORT_IGNORE_CERT: 'notifications.smtp.transport.ignoreCert',
+  NOTIFICATIONS_SMTP_TRANSPORT_HOST: 'notifications.smtp.transport.host',
+  NOTIFICATIONS_SMTP_TRANSPORT_PORT: 'notifications.smtp.transport.port',
+  NOTIFICATIONS_SMTP_TRANSPORT_USERNAME: 'notifications.smtp.transport.username',
+  NOTIFICATIONS_SMTP_TRANSPORT_PASSWORD: 'notifications.smtp.transport.password',
+
  REVERSE_GEOCODING_ENABLED: 'reverseGeocoding.enabled',

  NEW_VERSION_CHECK_ENABLED: 'newVersionCheck.enabled',
@@ -306,6 +315,20 @@ export interface SystemConfig {
      enabled: boolean;
    };
  };
+  notifications: {
+    smtp: {
+      enabled: boolean;
+      from: string;
+      replyTo: string;
+      transport: {
+        ignoreCert: boolean;
+        host: string;
+        port: number;
+        username: string;
+        password: string;
+      };
+    };
+  };
  server: {
    externalDomain: string;
    loginPageMessage: string;
--- a/server/src/interfaces/job.interface.ts
+++ b/server/src/interfaces/job.interface.ts
@@ -11,6 +11,7 @@ export enum QueueName {
  SEARCH = 'search',
  SIDECAR = 'sidecar',
  LIBRARY = 'library',
+  NOTIFICATION = 'notifications',
 }

 export type ConcurrentQueueName = Exclude<
@@ -90,6 +91,10 @@ export enum JobName {
  SIDECAR_DISCOVERY = 'sidecar-discovery',
  SIDECAR_SYNC = 'sidecar-sync',
  SIDECAR_WRITE = 'sidecar-write',
+
+  // Notification
+  NOTIFY_SIGNUP = 'notify-signup',
+  SEND_EMAIL = 'notification-send-email',
 }

 export const JOBS_ASSET_PAGINATION_SIZE = 1000;
@@ -136,6 +141,17 @@ export interface IDeferrableJob extends IEntityJob {
  deferred?: boolean;
 }

+export interface IEmailJob {
+  to: string;
+  subject: string;
+  html: string;
+  text: string;
+}
+
+export interface INotifySignupJob extends IEntityJob {
+  tempPassword?: string;
+}
+
 export interface JobCounts {
  active: number;
  completed: number;
@@ -218,7 +234,11 @@ export type JobItem =
  | { name: JobName.LIBRARY_REMOVE_OFFLINE; data: IEntityJob }
  | { name: JobName.LIBRARY_DELETE; data: IEntityJob }
  | { name: JobName.LIBRARY_QUEUE_SCAN_ALL; data: IBaseJob }
-  | { name: JobName.LIBRARY_QUEUE_CLEANUP; data: IBaseJob };
+  | { name: JobName.LIBRARY_QUEUE_CLEANUP; data: IBaseJob }
+
+  // Notification
+  | { name: JobName.SEND_EMAIL; data: IEmailJob }
+  | { name: JobName.NOTIFY_SIGNUP; data: INotifySignupJob };

 export enum JobStatus {
  SUCCESS = 'success',
--- a/server/src/interfaces/notification.interface.ts
+++ b/server/src/interfaces/notification.interface.ts
@@ -0,0 +1,44 @@
+export const INotificationRepository = 'INotificationRepository';
+
+export type SendEmailOptions = {
+  from: string;
+  to: string;
+  replyTo?: string;
+  subject: string;
+  html: string;
+  text: string;
+  smtp: SmtpOptions;
+};
+
+export type SmtpOptions = {
+  host: string;
+  port?: number;
+  username?: string;
+  password?: string;
+  ignoreCert?: boolean;
+};
+
+export enum EmailTemplate {
+  WELCOME = 'welcome',
+  RESET_PASSWORD = 'reset-password',
+}
+
+export interface WelcomeEmailProps {
+  baseUrl: string;
+  displayName: string;
+  username: string;
+  password?: string;
+}
+
+export type EmailRenderRequest = { template: EmailTemplate.WELCOME; data: WelcomeEmailProps };
+
+export type SendEmailResponse = {
+  messageId: string;
+  response: any;
+};
+
+export interface INotificationRepository {
+  renderEmail(request: EmailRenderRequest): { html: string; text: string };
+  sendEmail(options: SendEmailOptions): Promise<SendEmailResponse>;
+  verifySmtp(options: SmtpOptions): Promise<true>;
+}
--- a/server/src/repositories/index.ts
+++ b/server/src/repositories/index.ts
@@ -19,6 +19,7 @@ import { IMemoryRepository } from 'src/interfaces/memory.interface';
 import { IMetadataRepository } from 'src/interfaces/metadata.interface';
 import { IMetricRepository } from 'src/interfaces/metric.interface';
 import { IMoveRepository } from 'src/interfaces/move.interface';
+import { INotificationRepository } from 'src/interfaces/notification.interface';
 import { IPartnerRepository } from 'src/interfaces/partner.interface';
 import { IPersonRepository } from 'src/interfaces/person.interface';
 import { ISearchRepository } from 'src/interfaces/search.interface';
@@ -51,6 +52,7 @@ import { MemoryRepository } from 'src/repositories/memory.repository';
 import { MetadataRepository } from 'src/repositories/metadata.repository';
 import { MetricRepository } from 'src/repositories/metric.repository';
 import { MoveRepository } from 'src/repositories/move.repository';
+import { NotificationRepository } from 'src/repositories/notification.repository';
 import { PartnerRepository } from 'src/repositories/partner.repository';
 import { PersonRepository } from 'src/repositories/person.repository';
 import { SearchRepository } from 'src/repositories/search.repository';
@@ -84,6 +86,7 @@ export const repositories = [
  { provide: IMetadataRepository, useClass: MetadataRepository },
  { provide: IMetricRepository, useClass: MetricRepository },
  { provide: IMoveRepository, useClass: MoveRepository },
+  { provide: INotificationRepository, useClass: NotificationRepository },
  { provide: IPartnerRepository, useClass: PartnerRepository },
  { provide: IPersonRepository, useClass: PersonRepository },
  { provide: IServerInfoRepository, useClass: ServerInfoRepository },
--- a/server/src/repositories/job.repository.ts
+++ b/server/src/repositories/job.repository.ts
@@ -78,6 +78,10 @@ export const JOBS_TO_QUEUE: Record<JobName, QueueName> = {
  [JobName.LIBRARY_REMOVE_OFFLINE]: QueueName.LIBRARY,
  [JobName.LIBRARY_QUEUE_SCAN_ALL]: QueueName.LIBRARY,
  [JobName.LIBRARY_QUEUE_CLEANUP]: QueueName.LIBRARY,
+
+  // Notification
+  [JobName.SEND_EMAIL]: QueueName.NOTIFICATION,
+  [JobName.NOTIFY_SIGNUP]: QueueName.NOTIFICATION,
 };

@Instrumentation()
--- a/server/src/repositories/notification.repository.ts
+++ b/server/src/repositories/notification.repository.ts
@@ -0,0 +1,72 @@
+import { Inject, Injectable } from '@nestjs/common';
+import { render } from '@react-email/render';
+import { createTransport } from 'nodemailer';
+import React from 'react';
+import { WelcomeEmail } from 'src/emails/welcome.email';
+import { ILoggerRepository } from 'src/interfaces/logger.interface';
+import {
+  EmailRenderRequest,
+  EmailTemplate,
+  INotificationRepository,
+  SendEmailOptions,
+  SendEmailResponse,
+  SmtpOptions,
+} from 'src/interfaces/notification.interface';
+import { Instrumentation } from 'src/utils/instrumentation';
+
+@Instrumentation()
+@Injectable()
+export class NotificationRepository implements INotificationRepository {
+  constructor(@Inject(ILoggerRepository) private logger: ILoggerRepository) {
+    this.logger.setContext(NotificationRepository.name);
+  }
+
+  verifySmtp(options: SmtpOptions): Promise<true> {
+    const transport = this.createTransport(options);
+    try {
+      return transport.verify();
+    } finally {
+      transport.close();
+    }
+  }
+
+  renderEmail(request: EmailRenderRequest): { html: string; text: string } {
+    const component = this.render(request);
+    const html = render(component, { pretty: true });
+    const text = render(component, { plainText: true });
+    return { html, text };
+  }
+
+  sendEmail({ to, from, subject, html, text, smtp }: SendEmailOptions): Promise<SendEmailResponse> {
+    this.logger.debug(`Sending email to ${to} with subject: ${subject}`);
+    const transport = this.createTransport(smtp);
+    try {
+      return transport.sendMail({ to, from, subject, html, text });
+    } finally {
+      transport.close();
+    }
+  }
+
+  private render({ template, data }: EmailRenderRequest): React.FunctionComponentElement<any> {
+    switch (template) {
+      case EmailTemplate.WELCOME: {
+        return React.createElement(WelcomeEmail, data);
+      }
+    }
+  }
+
+  private createTransport(options: SmtpOptions) {
+    return createTransport({
+      host: options.host,
+      port: options.port,
+      tls: { rejectUnauthorized: options.ignoreCert },
+      auth:
+        options.username || options.password
+          ? {
+              user: options.username,
+              pass: options.password,
+            }
+          : undefined,
+    });
+  }
+}
--- a/server/src/services/index.ts
+++ b/server/src/services/index.ts
@@ -14,6 +14,7 @@ import { MediaService } from 'src/services/media.service';
 import { MemoryService } from 'src/services/memory.service';
 import { MetadataService } from 'src/services/metadata.service';
 import { MicroservicesService } from 'src/services/microservices.service';
+import { NotificationService } from 'src/services/notification.service';
 import { PartnerService } from 'src/services/partner.service';
 import { PersonService } from 'src/services/person.service';
 import { SearchService } from 'src/services/search.service';
@@ -48,6 +49,7 @@ export const services = [
  MediaService,
  MemoryService,
  MetadataService,
+  NotificationService,
  PartnerService,
  PersonService,
  SearchService,
--- a/server/src/services/job.service.spec.ts
+++ b/server/src/services/job.service.spec.ts
@@ -120,6 +120,7 @@ describe(JobService.name, () => {
        [QueueName.FACIAL_RECOGNITION]: expectedJobStatus,
        [QueueName.SIDECAR]: expectedJobStatus,
        [QueueName.LIBRARY]: expectedJobStatus,
+        [QueueName.NOTIFICATION]: expectedJobStatus,
      });
    });
  });
@@ -252,6 +253,7 @@ describe(JobService.name, () => {
          [QueueName.MIGRATION]: { concurrency: 10 },
          [QueueName.THUMBNAIL_GENERATION]: { concurrency: 10 },
          [QueueName.VIDEO_CONVERSION]: { concurrency: 10 },
+          [QueueName.NOTIFICATION]: { concurrency: 5 },
        },
      } as SystemConfig);

--- a/server/src/services/microservices.service.ts
+++ b/server/src/services/microservices.service.ts
@@ -7,6 +7,7 @@ import { JobService } from 'src/services/job.service';
 import { LibraryService } from 'src/services/library.service';
 import { MediaService } from 'src/services/media.service';
 import { MetadataService } from 'src/services/metadata.service';
+import { NotificationService } from 'src/services/notification.service';
 import { PersonService } from 'src/services/person.service';
 import { SessionService } from 'src/services/session.service';
 import { SmartInfoService } from 'src/services/smart-info.service';
@@ -22,23 +23,25 @@ export class MicroservicesService {
    private auditService: AuditService,
    private assetService: AssetService,
    private configService: SystemConfigService,
+    private databaseService: DatabaseService,
    private jobService: JobService,
    private libraryService: LibraryService,
    private mediaService: MediaService,
    private metadataService: MetadataService,
+    private notificationService: NotificationService,
    private personService: PersonService,
    private smartInfoService: SmartInfoService,
    private sessionService: SessionService,
    private storageTemplateService: StorageTemplateService,
    private storageService: StorageService,
    private userService: UserService,
-    private databaseService: DatabaseService,
  ) {}

  async init() {
    await this.databaseService.init();
    await this.configService.init();
    await this.libraryService.init();
+    await this.notificationService.init();
    await this.jobService.init({
      [JobName.ASSET_DELETION]: (data) => this.assetService.handleAssetDeletion(data),
      [JobName.ASSET_DELETION_CHECK]: () => this.assetService.handleAssetDeletionCheck(),
@@ -80,6 +83,8 @@ export class MicroservicesService {
      [JobName.LIBRARY_REMOVE_OFFLINE]: (data) => this.libraryService.handleOfflineRemoval(data),
      [JobName.LIBRARY_QUEUE_SCAN_ALL]: (data) => this.libraryService.handleQueueAllScan(data),
      [JobName.LIBRARY_QUEUE_CLEANUP]: () => this.libraryService.handleQueueCleanup(),
+      [JobName.SEND_EMAIL]: (data) => this.notificationService.handleSendEmail(data),
+      [JobName.NOTIFY_SIGNUP]: (data) => this.notificationService.handleUserSignup(data),
    });

    await this.metadataService.init();
--- a/server/src/services/notification.service.ts
+++ b/server/src/services/notification.service.ts
@@ -0,0 +1,98 @@
+import { Inject, Injectable } from '@nestjs/common';
+import { SystemConfigCore } from 'src/cores/system-config.core';
+import { OnServerEvent } from 'src/decorators';
+import { ServerAsyncEvent, ServerAsyncEventMap } from 'src/interfaces/event.interface';
+import { IEmailJob, IJobRepository, INotifySignupJob, JobName, JobStatus } from 'src/interfaces/job.interface';
+import { ILoggerRepository } from 'src/interfaces/logger.interface';
+import { EmailTemplate, INotificationRepository } from 'src/interfaces/notification.interface';
+import { ISystemConfigRepository } from 'src/interfaces/system-config.interface';
+import { IUserRepository } from 'src/interfaces/user.interface';
+
+@Injectable()
+export class NotificationService {
+  private configCore: SystemConfigCore;
+
+  constructor(
+    @Inject(ISystemConfigRepository) configRepository: ISystemConfigRepository,
+    @Inject(INotificationRepository) private notificationRepository: INotificationRepository,
+    @Inject(IUserRepository) private userRepository: IUserRepository,
+    @Inject(IJobRepository) private jobRepository: IJobRepository,
+    @Inject(ILoggerRepository) private logger: ILoggerRepository,
+  ) {
+    this.logger.setContext(NotificationService.name);
+    this.configCore = SystemConfigCore.create(configRepository, logger);
+  }
+
+  init() {
+    // TODO
+    return Promise.resolve();
+  }
+
+  @OnServerEvent(ServerAsyncEvent.CONFIG_VALIDATE)
+  async onValidateConfig({ newConfig }: ServerAsyncEventMap[ServerAsyncEvent.CONFIG_VALIDATE]) {
+    try {
+      if (newConfig.notifications.smtp.enabled) {
+        await this.notificationRepository.verifySmtp(newConfig.notifications.smtp.transport);
+      }
+    } catch (error: Error | any) {
+      this.logger.error(`Failed to validate SMTP configuration: ${error}`, error?.stack);
+      throw new Error(`Invalid SMTP configuration: ${error}`);
+    }
+  }
+
+  async handleUserSignup({ id, tempPassword }: INotifySignupJob) {
+    const user = await this.userRepository.get(id, { withDeleted: false });
+    if (!user) {
+      return JobStatus.SKIPPED;
+    }
+
+    const { server } = await this.configCore.getConfig();
+    const { html, text } = this.notificationRepository.renderEmail({
+      template: EmailTemplate.WELCOME,
+      data: {
+        baseUrl: server.externalDomain || 'http://localhost:2283',
+        displayName: user.name,
+        username: user.email,
+        password: tempPassword,
+      },
+    });
+
+    await this.jobRepository.queue({
+      name: JobName.SEND_EMAIL,
+      data: {
+        to: user.email,
+        subject: 'Welcome to Immich',
+        html,
+        text,
+      },
+    });
+
+    return JobStatus.SUCCESS;
+  }
+
+  async handleSendEmail(data: IEmailJob): Promise<JobStatus> {
+    const { notifications } = await this.configCore.getConfig();
+    if (!notifications.smtp.enabled) {
+      return JobStatus.SKIPPED;
+    }
+
+    const { to, subject, html, text: plain } = data;
+    const response = await this.notificationRepository.sendEmail({
+      to,
+      subject,
+      html,
+      text: plain,
+      from: notifications.smtp.from,
+      replyTo: notifications.smtp.replyTo || notifications.smtp.from,
+      smtp: notifications.smtp.transport,
+    });
+
+    if (!response) {
+      return JobStatus.FAILED;
+    }
+
+    this.logger.log(`Sent mail with id: ${response.messageId} status: ${response.response}`);
+
+    return JobStatus.SUCCESS;
+  }
+}
--- a/server/src/services/server-info.service.spec.ts
+++ b/server/src/services/server-info.service.spec.ts
@@ -186,6 +186,7 @@ describe(ServerInfoService.name, () => {
        sidecar: true,
        configFile: false,
        trash: true,
+        email: false,
      });
      expect(configMock.load).toHaveBeenCalled();
    });
--- a/server/src/services/system-config.service.spec.ts
+++ b/server/src/services/system-config.service.spec.ts
@@ -44,6 +44,7 @@ const updatedConfig = Object.freeze<SystemConfig>({
    [QueueName.MIGRATION]: { concurrency: 5 },
    [QueueName.THUMBNAIL_GENERATION]: { concurrency: 5 },
    [QueueName.VIDEO_CONVERSION]: { concurrency: 1 },
+    [QueueName.NOTIFICATION]: { concurrency: 5 },
  },
  ffmpeg: {
    crf: 30,
@@ -153,6 +154,20 @@ const updatedConfig = Object.freeze<SystemConfig>({
  user: {
    deleteDelay: 15,
  },
+  notifications: {
+    smtp: {
+      enabled: false,
+      from: '',
+      replyTo: '',
+      transport: {
+        host: '',
+        port: 587,
+        username: '',
+        password: '',
+        ignoreCert: false,
+      },
+    },
+  },
 });

 describe(SystemConfigService.name, () => {
--- a/server/src/services/user.service.ts
+++ b/server/src/services/user.service.ts
@@ -60,8 +60,13 @@ export class UserService {
    return this.findOrFail(auth.user.id, {}).then(mapUser);
  }

-  create(createUserDto: CreateUserDto): Promise<UserResponseDto> {
-    return this.userCore.createUser(createUserDto).then(mapUser);
+  async create(dto: CreateUserDto): Promise<UserResponseDto> {
+    const user = await this.userCore.createUser(dto);
+    const tempPassword = user.shouldChangePassword ? dto.password : undefined;
+    if (dto.notify) {
+      await this.jobRepository.queue({ name: JobName.NOTIFY_SIGNUP, data: { id: user.id, tempPassword } });
+    }
+    return mapUser(user);
  }

  async update(auth: AuthDto, dto: UpdateUserDto): Promise<UserResponseDto> {