So I use a separate gmail account for my server but forgot to mention in guide. I will add it.

Although I wonder if its necessary if you use an app password. What is the worst a bad-actor can do with the app password?