diff --git a/platform/monitoring/11-sealed-smtp.yaml b/platform/monitoring/11-sealed-smtp.yaml
new file mode 100644
index 0000000..eeaf6f2
--- /dev/null
+++ b/platform/monitoring/11-sealed-smtp.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smtp-credentials
+  namespace: monitoring
+spec:
+  encryptedData:
+    senha: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smtp-credentials
+      namespace: monitoring
diff --git a/platform/monitoring/12-alertmanagerconfig-email.yaml b/platform/monitoring/12-alertmanagerconfig-email.yaml
new file mode 100644
index 0000000..a1bfcc1
--- /dev/null
+++ b/platform/monitoring/12-alertmanagerconfig-email.yaml
@@ -0,0 +1,37 @@
+# =============================================================================
+# O canal do Alertmanager: e-mail, pelo SMTP que ja existe.
+#
+# Decisao do dono em 2026-09-26: "Email por enquanto". O secret
+# `smtp-credentials` precisa estar NESTE namespace (monitoring) — o Operator
+# so le Secret referenciado pelo AlertmanagerConfig no mesmo namespace dele.
+#
+# O `release: monitoring` NAO E ENFEITE: sem ele o Alertmanager (selector
+# `alertmanagerConfigSelector: matchLabels: release: monitoring`) ignora este
+# arquivo em silencio.
+# =============================================================================
+apiVersion: monitoring.coreos.com/v1alpha1
+kind: AlertmanagerConfig
+metadata:
+  name: canal-email
+  namespace: monitoring
+  labels:
+    release: monitoring
+spec:
+  route:
+    receiver: email-dono
+    groupBy: [alertname, namespace]
+    groupWait: 30s
+    groupInterval: 5m
+    repeatInterval: 12h
+  receivers:
+    - name: email-dono
+      emailConfigs:
+        - to: "carlosfernandes.3@gmail.com"
+          from: "nao-responda@athleticmap.com"
+          smarthost: "smtp.hostinger.com:587"
+          authUsername: "nao-responda@athleticmap.com"
+          authPassword:
+            name: smtp-credentials
+            key: senha
+          requireTLS: true
+          sendResolved: true