docs/developer/deployment/emails.mdx
Spree handles two categories of emails:
| Category | Sent by | Examples |
|---|---|---|
| Customer-facing | Storefront (via webhooks) | Order confirmation, shipping notification, password reset |
| System/admin | Spree backend (Rails) | Staff invitation, report ready, export complete |
In headless builds, customer-facing emails are rendered and sent by the storefront, not the backend. The Spree backend publishes webhook events, and the storefront receives them, renders React email templates, and sends via Resend (or any provider).
Spree Backend → Webhook POST → Storefront → render email → send via Resend
(HMAC signed) (verified) (react-email)
Create a webhook endpoint in Spree Admin → Settings → Developers → Webhooks:
https://your-storefront.com/api/webhooks/spreeorder.completed, order.canceled, order.shipped, customer.password_reset_requestedConfigure the storefront with the webhook secret and email provider:
# .env.local (storefront)
SPREE_WEBHOOK_SECRET=your_webhook_endpoint_secret_key
RESEND_API_KEY=re_your_resend_api_key
EMAIL_FROM=Your Store <[email protected]>
| Event | |
|---|---|
order.completed | Order confirmation with items, totals, addresses |
order.canceled | Cancellation notice |
order.shipped | Shipping notification with tracking link |
customer.password_reset_requested | Password reset link |
If you're not using the Next.js storefront, you can build your own webhook handler with any framework. Use @spree/sdk/webhooks for signature verification:
import { verifyWebhookSignature } from '@spree/sdk/webhooks'
See Webhooks documentation for the full payload format and verification details.
System emails are internal notifications sent to store staff, not customers. They are sent by the Spree backend via Rails ActionMailer.
| When | |
|---|---|
| Staff invitation | Admin invites a new team member |
| Invitation accepted | Invited user accepts |
| Report ready | Background report generation completes |
| Export complete | Data export finishes |
| Webhook endpoint disabled | Endpoint auto-disabled after repeated failures |
Set the following environment variables on the Spree backend to enable system email delivery:
| Variable | Default | Description |
|---|---|---|
SMTP_HOST | — | SMTP server address (e.g., smtp.sendgrid.net, smtp.resend.com) |
SMTP_PORT | 587 | SMTP server port |
SMTP_USERNAME | — | SMTP auth username |
SMTP_PASSWORD | — | SMTP auth password |
SMTP_FROM_ADDRESS | — | Default "from" email address (e.g., [email protected]) |
RAILS_HOST | example.com | Host used in email URLs |
When SMTP_HOST is not set, emails are printed to the Rails log instead of being sent.
<Warning>
Remember to verify the email address in SendGrid you intend to use for sending, otherwise emails will be rejected.
[Read more about sender verification](https://www.twilio.com/docs/sendgrid/ui/sending-email/sender-verification).
</Warning>
In development, no email provider is needed. Emails are rendered to HTML files in .next/emails/ with a clickable file:// link in the console. To preview and design templates:
npm run email:dev
To test the full webhook flow locally, use Cloudflare Tunnel:
brew install cloudflared
cloudflared tunnel --url http://localhost:3001
Use the tunnel URL as the webhook endpoint URL in Spree Admin.
System emails use letter_opener in development — emails open automatically in your browser instead of being sent.