This is sever-side code, so you handle this email address the same way you handle other secrets, like your database password: put them in configuration instead

This is sever-side code, so you handle this email address the same way you handle other secrets, like your database password: put them in configuration instead of hardcoding them. With end-to-end encryption, where encryption happens in an open source client, this conflict would be more interesting.