@vn.chemgio/nestjs-utilities 2.0.0

package/dist/typeorm/README.md

@@ -0,0 +1,100 @@
+# @vn.chemgio/nestjs-utilities/typeorm
+
+TypeORM configuration helpers for cloud databases (RDS PostgreSQL / MySQL).
+
+## Installation
+
+```bash
+npm install @vn.chemgio/nestjs-utilities @nestjs/typeorm @nestjs/config
+```
+
+## Prerequisites
+
+The following environment variables must be declared in your `.env` file (or provided to `ConfigModule.forRoot()`):
+
+| Variable | Required | Default |
+|---|---|---|
+| `DB_HOST` | No | `localhost` |
+| `DB_PORT` | No | `5432` (PG) / `3306` (MySQL) |
+| `DB_USERNAME` | Yes | — |
+| `DB_PASSWORD` | Yes | — |
+| `DB_DATABASE` | No | `postgres` / `mysql` |
+| `DB_SYNCHRONIZE` | No | `false` |
+| `DB_LOGGING` | No | `false` |
+| `DB_SSL_REJECT_UNAUTHORIZED` | No | `false` |
+
+## Usage
+
+```typescript
+// app.module.ts
+import { Module } from '@nestjs/common'
+import { ConfigModule, ConfigService } from '@nestjs/config'
+import { TypeOrmModule } from '@nestjs/typeorm'
+import { configTypeOrmRDSPostgres } from '@vn.chemgio/nestjs-utilities/typeorm'
+
+@Module({
+  imports: [
+    ConfigModule.forRoot(),
+    TypeOrmModule.forRootAsync({
+      inject: [ConfigService],
+      useFactory: (config: ConfigService) =>
+        configTypeOrmRDSPostgres(config, {
+          poolSize: 20,
+          schema: 'public',
+        }),
+    }),
+  ],
+})
+export class AppModule {}
+```
+
+## Environment variables
+
+| Variable | Default | Type | Description |
+|---|---|---|---|
+| `DB_HOST` | `localhost` | `string` | Database host |
+| `DB_PORT` | `5432` (PG) / `3306` (MySQL) | `number` | Connection port |
+| `DB_USERNAME` | — | `string` | Database username |
+| `DB_PASSWORD` | — | `string` | Database password |
+| `DB_DATABASE` | `postgres` / `mysql` | `string` | Database name |
+| `DB_SYNCHRONIZE` | `false` | `boolean` | Auto-sync schema (dev only) |
+| `DB_LOGGING` | `false` | `boolean` | Enable query logging |
+| `DB_SSL_REJECT_UNAUTHORIZED` | `false` | `boolean` | Reject unauthorized SSL certs |
+
+## TypeOrmConfigOptions
+
+| Option | Default | Description |
+|---|---|---|
+| `schema` | — | PostgreSQL schema (e.g. `public`) |
+| `poolSize` | `20` (PG) / `10` (MySQL) | Maximum connections in pool |
+| `idleTimeoutMs` | `30000` (PG) / `10000` (MySQL) | Max idle time before closing |
+| `connectionTimeoutMs` | `10000` (PG) / `5000` (MySQL) | Connection timeout |
+| `statementTimeoutMs` | `30000` (PG) | Query timeout |
+
+## SSL — why both `ssl` and `extra.ssl`?
+
+```typescript
+ssl: { rejectUnauthorized: false },
+extra: {
+  ssl: { rejectUnauthorized: false },
+  // ...
+}
+```
+
+- **`ssl`** — tells TypeORM to configure the driver (`pg` / `mysql2`) with TLS
+- **`extra.ssl`** — passes SSL config directly to the underlying driver pool
+
+Cloud databases (AWS RDS, Google Cloud SQL, etc.) often use self-signed certificates, requiring `rejectUnauthorized: false` to trust them.
+
+## Sample .env
+
+```bash
+DB_HOST=database-1.xxxxxx.us-east-1.rds.amazonaws.com
+DB_PORT=5432
+DB_USERNAME=postgres
+DB_PASSWORD=my-secret-pw
+DB_DATABASE=mydb
+DB_SYNCHRONIZE=false
+DB_LOGGING=true
+DB_SSL_REJECT_UNAUTHORIZED=false
+```

package/dist/typeorm/index.d.ts

@@ -0,0 +1,11 @@
+import type { ConfigService } from '@nestjs/config';
+import type { TypeOrmModuleOptions } from '@nestjs/typeorm';
+export interface TypeOrmConfigOptions {
+    schema?: string;
+    poolSize?: number;
+    idleTimeoutMs?: number;
+    connectionTimeoutMs?: number;
+    statementTimeoutMs?: number;
+}
+export declare function configTypeOrmRDSPostgres(configService: ConfigService, options?: TypeOrmConfigOptions): TypeOrmModuleOptions;
+export declare function configTypeOrmMySQL(configService: ConfigService, options?: TypeOrmConfigOptions): TypeOrmModuleOptions;

package/dist/typeorm/index.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configTypeOrmRDSPostgres = configTypeOrmRDSPostgres;
+exports.configTypeOrmMySQL = configTypeOrmMySQL;
+function configTypeOrmRDSPostgres(configService, options) {
+    const rejectUnauthorized = configService.get('DB_SSL_REJECT_UNAUTHORIZED', false);
+    return {
+        type: 'postgres',
+        host: configService.get('DB_HOST', 'localhost'),
+        port: configService.get('DB_PORT', 5432),
+        username: configService.get('DB_USERNAME'),
+        password: configService.get('DB_PASSWORD'),
+        database: configService.get('DB_DATABASE', 'postgres'),
+        synchronize: configService.get('DB_SYNCHRONIZE', false),
+        logging: configService.get('DB_LOGGING', false) ? 'all' : false,
+        ssl: { rejectUnauthorized },
+        extra: {
+            ssl: { rejectUnauthorized },
+            max: options?.poolSize ?? 20,
+            idleTimeoutMillis: options?.idleTimeoutMs ?? 30000,
+            connectionTimeoutMillis: options?.connectionTimeoutMs ?? 10000,
+            statement_timeout: options?.statementTimeoutMs ?? 30000,
+            ...(options?.schema ? { schema: options.schema } : {}),
+        },
+        autoLoadEntities: true,
+        retryAttempts: 10,
+        retryDelay: 3000,
+    };
+}
+function configTypeOrmMySQL(configService, options) {
+    const rejectUnauthorized = configService.get('DB_SSL_REJECT_UNAUTHORIZED', false);
+    return {
+        type: 'mysql',
+        host: configService.get('DB_HOST', 'localhost'),
+        port: configService.get('DB_PORT', 3306),
+        username: configService.get('DB_USERNAME'),
+        password: configService.get('DB_PASSWORD'),
+        database: configService.get('DB_DATABASE', 'mysql'),
+        synchronize: configService.get('DB_SYNCHRONIZE', false),
+        logging: configService.get('DB_LOGGING', false) ? 'all' : false,
+        ssl: { rejectUnauthorized },
+        extra: {
+            ssl: { rejectUnauthorized },
+            max: options?.poolSize ?? 10,
+            idleTimeoutMillis: options?.idleTimeoutMs ?? 10000,
+            connectionTimeoutMillis: options?.connectionTimeoutMs ?? 5000,
+        },
+        autoLoadEntities: true,
+        retryAttempts: 10,
+        retryDelay: 3000,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/typeorm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/typeorm/index.ts"],"names":[],"mappings":";;AAWA,4DA8BC;AAED,gDA4BC;AA5DD,SAAgB,wBAAwB,CACtC,aAA4B,EAC5B,OAA8B;IAE9B,MAAM,kBAAkB,GAAG,aAAa,CAAC,GAAG,CAC1C,4BAA4B,EAC5B,KAAK,CACN,CAAC;IACF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAS,SAAS,EAAE,WAAW,CAAC;QACvD,IAAI,EAAE,aAAa,CAAC,GAAG,CAAS,SAAS,EAAE,IAAI,CAAC;QAChD,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAqB,aAAa,CAAC;QAC9D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAqB,aAAa,CAAC;QAC9D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAS,aAAa,EAAE,UAAU,CAAC;QAC9D,WAAW,EAAE,aAAa,CAAC,GAAG,CAAU,gBAAgB,EAAE,KAAK,CAAC;QAChE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAU,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;QACxE,GAAG,EAAE,EAAE,kBAAkB,EAAE;QAC3B,KAAK,EAAE;YACL,GAAG,EAAE,EAAE,kBAAkB,EAAE;YAC3B,GAAG,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE;YAC5B,iBAAiB,EAAE,OAAO,EAAE,aAAa,IAAI,KAAK;YAClD,uBAAuB,EAAE,OAAO,EAAE,mBAAmB,IAAI,KAAK;YAC9D,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,IAAI,KAAK;YACvD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,aAA4B,EAC5B,OAA8B;IAE9B,MAAM,kBAAkB,GAAG,aAAa,CAAC,GAAG,CAC1C,4BAA4B,EAC5B,KAAK,CACN,CAAC;IACF,OAAO;QACL,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,aAAa,CAAC,GAAG,CAAS,SAAS,EAAE,WAAW,CAAC;QACvD,IAAI,EAAE,aAAa,CAAC,GAAG,CAAS,SAAS,EAAE,IAAI,CAAC;QAChD,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAqB,aAAa,CAAC;QAC9D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAqB,aAAa,CAAC;QAC9D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAS,aAAa,EAAE,OAAO,CAAC;QAC3D,WAAW,EAAE,aAAa,CAAC,GAAG,CAAU,gBAAgB,EAAE,KAAK,CAAC;QAChE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAU,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;QACxE,GAAG,EAAE,EAAE,kBAAkB,EAAE;QAC3B,KAAK,EAAE;YACL,GAAG,EAAE,EAAE,kBAAkB,EAAE;YAC3B,GAAG,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE;YAC5B,iBAAiB,EAAE,OAAO,EAAE,aAAa,IAAI,KAAK;YAClD,uBAAuB,EAAE,OAAO,EAAE,mBAAmB,IAAI,IAAI;SAC9D;QACD,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,156 @@
+{
+  "name": "@vn.chemgio/nestjs-utilities",
+  "version": "2.0.0",
+  "description": "NestJS utilities collection - modular packages for common NestJS integrations",
+  "author": {
+    "name": "Wind Blade",
+    "url": "https://github.com/Vn-ChemGio"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Vn-ChemGio/nestjs-utilities.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Vn-ChemGio/nestjs-utilities/issues"
+  },
+  "homepage": "https://github.com/Vn-ChemGio/nestjs-utilities#readme",
+  "private": false,
+  "license": "MIT",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    },
+    "./typeorm": {
+      "types": "./dist/typeorm/index.d.ts",
+      "import": "./dist/typeorm/index.js",
+      "require": "./dist/typeorm/index.js"
+    },
+    "./cache": {
+      "types": "./dist/cache/index.d.ts",
+      "import": "./dist/cache/index.js",
+      "require": "./dist/cache/index.js"
+    },
+    "./queue": {
+      "types": "./dist/queue/index.d.ts",
+      "import": "./dist/queue/index.js",
+      "require": "./dist/queue/index.js"
+    }
+  },
+  "typesVersions": {
+    "*": {
+      "typeorm": [
+        "./dist/typeorm/index.d.ts"
+      ],
+      "cache": [
+        "./dist/cache/index.d.ts"
+      ],
+      "queue": [
+        "./dist/queue/index.d.ts"
+      ]
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "src/typeorm/README.md",
+    "src/cache/README.md",
+    "src/queue/README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && node -e \"require('fs').copyFileSync('src/typeorm/README.md','dist/typeorm/README.md');require('fs').copyFileSync('src/cache/README.md','dist/cache/README.md');require('fs').copyFileSync('src/queue/README.md','dist/queue/README.md')\"",
+    "clean": "rimraf dist",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+    "lint": "eslint \"{src,test}/**/*.ts\" --fix",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "test:cov": "jest --coverage",
+    "prepublishOnly": "npm run build",
+    "prepack": "npm run build"
+  },
+  "peerDependencies": {
+    "@keyv/redis": "^5.1.6",
+    "@keyv/valkey": "^1.0.11",
+    "@nestjs/common": "^11.0.1",
+    "@nestjs/config": "^4.0.4",
+    "@nestjs/core": "^11.0.1",
+    "@nestjs/typeorm": "^11.0.1",
+    "rxjs": "^7.8.1",
+    "@nestjs/bullmq": "^11.0.0",
+    "bullmq": "^5.44.0"
+  },
+  "peerDependenciesMeta": {
+    "@nestjs/typeorm": {
+      "optional": true
+    },
+    "@nestjs/config": {
+      "optional": true
+    },
+    "@keyv/valkey": {
+      "optional": true
+    },
+    "@keyv/redis": {
+      "optional": true
+    },
+    "@nestjs/bullmq": {
+      "optional": true
+    },
+    "bullmq": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "cacheable": "^2.3.5",
+    "keyv": "^5.6.0",
+    "reflect-metadata": "^0.2.2"
+  },
+  "devDependencies": {
+    "@eslint/eslintrc": "^3.2.0",
+    "@eslint/js": "^9.18.0",
+    "@keyv/redis": "^5.1.6",
+    "@keyv/valkey": "^1.0.11",
+    "@nestjs/common": "^11.0.1",
+    "@nestjs/config": "^4.0.4",
+    "@nestjs/core": "^11.0.1",
+    "@nestjs/testing": "^11.0.1",
+    "@nestjs/typeorm": "^11.0.1",
+    "@nestjs/bullmq": "^11.0.0",
+    "bullmq": "^5.44.0",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^24.0.0",
+    "eslint": "^9.18.0",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-plugin-prettier": "^5.2.2",
+    "globals": "^17.0.0",
+    "jest": "^30.0.0",
+    "prettier": "^3.4.2",
+    "rimraf": "^6.0.1",
+    "rxjs": "^7.8.1",
+    "ts-jest": "^29.2.5",
+    "typescript": "^5.7.3",
+    "typescript-eslint": "^8.20.0"
+  },
+  "jest": {
+    "moduleFileExtensions": [
+      "js",
+      "json",
+      "ts"
+    ],
+    "rootDir": "src",
+    "testRegex": ".*\\.spec\\.ts$",
+    "transform": {
+      "^.+\\.(t|j)s$": "ts-jest"
+    },
+    "collectCoverageFrom": [
+      "**/*.(t|j)s"
+    ],
+    "coverageDirectory": "../coverage",
+    "testEnvironment": "node"
+  }
+}

package/src/cache/README.md

@@ -0,0 +1,91 @@
+# @vn.chemgio/nestjs-utilities/cache
+
+A global NestJS cache module using [Keyv](https://keyv.org/) + [Cacheable](https://github.com/jaredwray/cacheable) with Valkey or Redis backend.
+
+## Installation
+
+```bash
+npm install @vn.chemgio/nestjs-utilities keyv cacheable
+```
+
+Depending on your store:
+
+- **Valkey**: `npm install @keyv/valkey`
+- **Redis**: `npm install @keyv/redis`
+
+## Quick start
+
+### Valkey (reads `VALKEY_URL` from env)
+
+```typescript
+// app.module.ts
+import { CacheModule } from '@vn.chemgio/nestjs-utilities/cache'
+
+@Module({
+  imports: [
+    CacheModule.forRoot({ store: 'valkey' }),
+    // Requires VALKEY_URL in your .env:
+    // VALKEY_URL=valkey://localhost:6379
+  ],
+})
+export class AppModule {}
+```
+
+### Redis (reads `REDIS_URL` from env)
+
+```typescript
+CacheModule.forRoot({ store: 'redis' })
+// Requires REDIS_URL in .env:
+// REDIS_URL=redis://localhost:6379
+```
+
+### Direct URL (no env vars needed)
+
+```typescript
+CacheModule.forRoot({
+  store: 'valkey',
+  url: 'valkey://user:pass@host:6379',
+})
+```
+
+## Usage in a service
+
+```typescript
+import { Inject } from '@nestjs/common'
+import { CACHE_MANAGER } from '@vn.chemgio/nestjs-utilities/cache'
+import { Cacheable } from 'cacheable'
+
+@Injectable()
+export class MyService {
+  constructor(
+    @Inject(CACHE_MANAGER) private readonly cache: Cacheable,
+  ) {}
+
+  async getData(key: string) {
+    return this.cache.get(key)
+  }
+
+  async setData(key: string, value: unknown, ttl?: number) {
+    await this.cache.set(key, value, ttl)
+  }
+}
+```
+
+## CacheModuleOptions
+
+| Option | Default | Description |
+|---|---|---|
+| `store` | `'valkey'` | Backend store: `'valkey'` or `'redis'` |
+| `namespace` | `'{default}'` | Cache namespace prefix |
+| `url` | — | Connection URL. If omitted, reads `VALKEY_URL` or `REDIS_URL` from env |
+
+## How it works
+
+```
+Cacheable  →  Keyv  →  KeyvValkey / KeyvRedis  →  Valkey / Redis
+```
+
+- `KeyvValkey` / `KeyvRedis` connects to the backend
+- `Keyv` wraps it with a uniform API
+- `Cacheable` adds TTL, namespace, and caching logic
+- The module is `@Global()`, so `CACHE_MANAGER` is available everywhere

package/src/queue/README.md

@@ -0,0 +1,82 @@
+# @vn.chemgio/nestjs-utilities/queue
+
+RDS-style config factory for [BullMQ](https://bullmq.io) (via `@nestjs/bullmq`).
+
+Works with either Valkey (`VALKEY_URL`) or Redis (`REDIS_URL`) environment variables.
+
+## Installation
+
+```bash
+npm install @vn.chemgio/nestjs-utilities @nestjs/bullmq bullmq
+```
+
+## Usage
+
+```typescript
+import { BullModule } from '@nestjs/bullmq';
+import { configBullMQ } from '@vn.chemgio/nestjs-utilities/queue';
+
+@Module({
+  imports: [
+    BullModule.forRootAsync({
+      useFactory: configBullMQ,
+      inject: [ConfigService],
+    }),
+    BullModule.registerQueue({ name: 'email' }),
+  ],
+})
+export class AppModule {}
+```
+
+### Valkey (reads `VALKEY_URL` from env)
+
+```typescript
+BullModule.forRootAsync({
+  // Requires VALKEY_URL in .env:
+  // VALKEY_URL=valkey://localhost:6379
+  useFactory: configBullMQ,
+  inject: [ConfigService],
+})
+```
+
+### Redis (reads `REDIS_URL` from env)
+
+```typescript
+BullModule.forRootAsync({
+  useFactory: (config: ConfigService) =>
+    configBullMQ(config, { store: 'redis' }),
+  inject: [ConfigService],
+})
+```
+
+### With custom prefix and default job options
+
+```typescript
+BullModule.forRootAsync({
+  useFactory: (config: ConfigService) =>
+    configBullMQ(config, {
+      prefix: '{myapp}',
+      defaultJobOptions: { attempts: 3, removeOnComplete: 100 },
+    }),
+  inject: [ConfigService],
+})
+```
+
+### Direct URL (no env vars)
+
+```typescript
+BullModule.forRootAsync({
+  useFactory: () => ({
+    connection: { url: 'redis://user:pass@host:6379' },
+    prefix: '{default}',
+  }),
+})
+```
+
+## QueueModuleOptions
+
+| Option | Default | Description |
+|---|---|---|
+| `store` | `'valkey'` | Backend store: `'valkey'` or `'redis'` |
+| `prefix` | `'{default}'` | BullMQ key prefix |
+| `defaultJobOptions` | — | Default job options for all queues (e.g. `{ attempts: 3 }`) |

package/src/typeorm/README.md

@@ -0,0 +1,100 @@
+# @vn.chemgio/nestjs-utilities/typeorm
+
+TypeORM configuration helpers for cloud databases (RDS PostgreSQL / MySQL).
+
+## Installation
+
+```bash
+npm install @vn.chemgio/nestjs-utilities @nestjs/typeorm @nestjs/config
+```
+
+## Prerequisites
+
+The following environment variables must be declared in your `.env` file (or provided to `ConfigModule.forRoot()`):
+
+| Variable | Required | Default |
+|---|---|---|
+| `DB_HOST` | No | `localhost` |
+| `DB_PORT` | No | `5432` (PG) / `3306` (MySQL) |
+| `DB_USERNAME` | Yes | — |
+| `DB_PASSWORD` | Yes | — |
+| `DB_DATABASE` | No | `postgres` / `mysql` |
+| `DB_SYNCHRONIZE` | No | `false` |
+| `DB_LOGGING` | No | `false` |
+| `DB_SSL_REJECT_UNAUTHORIZED` | No | `false` |
+
+## Usage
+
+```typescript
+// app.module.ts
+import { Module } from '@nestjs/common'
+import { ConfigModule, ConfigService } from '@nestjs/config'
+import { TypeOrmModule } from '@nestjs/typeorm'
+import { configTypeOrmRDSPostgres } from '@vn.chemgio/nestjs-utilities/typeorm'
+
+@Module({
+  imports: [
+    ConfigModule.forRoot(),
+    TypeOrmModule.forRootAsync({
+      inject: [ConfigService],
+      useFactory: (config: ConfigService) =>
+        configTypeOrmRDSPostgres(config, {
+          poolSize: 20,
+          schema: 'public',
+        }),
+    }),
+  ],
+})
+export class AppModule {}
+```
+
+## Environment variables
+
+| Variable | Default | Type | Description |
+|---|---|---|---|
+| `DB_HOST` | `localhost` | `string` | Database host |
+| `DB_PORT` | `5432` (PG) / `3306` (MySQL) | `number` | Connection port |
+| `DB_USERNAME` | — | `string` | Database username |
+| `DB_PASSWORD` | — | `string` | Database password |
+| `DB_DATABASE` | `postgres` / `mysql` | `string` | Database name |
+| `DB_SYNCHRONIZE` | `false` | `boolean` | Auto-sync schema (dev only) |
+| `DB_LOGGING` | `false` | `boolean` | Enable query logging |
+| `DB_SSL_REJECT_UNAUTHORIZED` | `false` | `boolean` | Reject unauthorized SSL certs |
+
+## TypeOrmConfigOptions
+
+| Option | Default | Description |
+|---|---|---|
+| `schema` | — | PostgreSQL schema (e.g. `public`) |
+| `poolSize` | `20` (PG) / `10` (MySQL) | Maximum connections in pool |
+| `idleTimeoutMs` | `30000` (PG) / `10000` (MySQL) | Max idle time before closing |
+| `connectionTimeoutMs` | `10000` (PG) / `5000` (MySQL) | Connection timeout |
+| `statementTimeoutMs` | `30000` (PG) | Query timeout |
+
+## SSL — why both `ssl` and `extra.ssl`?
+
+```typescript
+ssl: { rejectUnauthorized: false },
+extra: {
+  ssl: { rejectUnauthorized: false },
+  // ...
+}
+```
+
+- **`ssl`** — tells TypeORM to configure the driver (`pg` / `mysql2`) with TLS
+- **`extra.ssl`** — passes SSL config directly to the underlying driver pool
+
+Cloud databases (AWS RDS, Google Cloud SQL, etc.) often use self-signed certificates, requiring `rejectUnauthorized: false` to trust them.
+
+## Sample .env
+
+```bash
+DB_HOST=database-1.xxxxxx.us-east-1.rds.amazonaws.com
+DB_PORT=5432
+DB_USERNAME=postgres
+DB_PASSWORD=my-secret-pw
+DB_DATABASE=mydb
+DB_SYNCHRONIZE=false
+DB_LOGGING=true
+DB_SSL_REJECT_UNAUTHORIZED=false
+```