From 209e058c2600a876e0fd289ee67e0dab0fb13fbe Mon Sep 17 00:00:00 2001
From: Gutierrez Soto Jhosepmyr Orlando <jhosepmyrgutierrezsoto@gmail.com>
Date: Thu, 9 Jul 2026 21:17:09 -0500
Subject: [PATCH 1/2] fix: point APP_URL/FRONTEND_URL/CORS at the custom domain
 (tamci.app)

Now that api.tamci.app and app.tamci.app have real ACM certs wired
into the ALB and CloudFront (reqsai-infra), the task definition should
reference those instead of the raw ELB/CloudFront default hostnames.
---
 ecs/task-definition.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ecs/task-definition.json b/ecs/task-definition.json
index 98911a51..f8d75a9f 100644
--- a/ecs/task-definition.json
+++ b/ecs/task-definition.json
@@ -15,7 +15,7 @@
       "environment": [
         {
           "name": "CORS_ALLOWED_ORIGINS",
-          "value": "https://d29o19vcsmcdsd.cloudfront.net"
+          "value": "https://app.tamci.app"
         },
         {
           "name": "SPRINGDOC_API_DOCS_ENABLED",
@@ -51,7 +51,7 @@
         },
         {
           "name": "FRONTEND_URL",
-          "value": "https://d29o19vcsmcdsd.cloudfront.net"
+          "value": "https://app.tamci.app"
         },
         {
           "name": "MAIL_PORT",
@@ -83,7 +83,7 @@
         },
         {
           "name": "APP_URL",
-          "value": "http://reqsai-production-api-121983331.us-east-1.elb.amazonaws.com"
+          "value": "https://api.tamci.app"
         },
         {
           "name": "GENERATION_PROVIDER",

From 57719d6f4e1198a2816699c6fe81a0e547779891 Mon Sep 17 00:00:00 2001
From: Gutierrez Soto Jhosepmyr Orlando <jhosepmyrgutierrezsoto@gmail.com>
Date: Fri, 10 Jul 2026 07:10:35 -0500
Subject: [PATCH 2/2] fix: set MAIL_FROM from the SMTP secret's username

Gmail requires the From header to match the authenticated account
when no alias is configured. Reads the same secret key as
MAIL_USERNAME instead of hardcoding an address, so rotating SMTP
credentials never needs a code change.
---
 ecs/task-definition.json | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ecs/task-definition.json b/ecs/task-definition.json
index f8d75a9f..eb905f72 100644
--- a/ecs/task-definition.json
+++ b/ecs/task-definition.json
@@ -113,6 +113,10 @@
           "name": "MAIL_PASSWORD",
           "valueFrom": "arn:aws:secretsmanager:us-east-1:418272789689:secret:reqsai/production/smtp-27o6Hf:password::"
         },
+        {
+          "name": "MAIL_FROM",
+          "valueFrom": "arn:aws:secretsmanager:us-east-1:418272789689:secret:reqsai/production/smtp-27o6Hf:username::"
+        },
         {
           "name": "DEEPGRAM_API_KEY",
           "valueFrom": "arn:aws:secretsmanager:us-east-1:418272789689:secret:reqsai/production/ai-GTSPn8:deepgram_api_key::"