better-ts-stack 2.0.2 → 2.1.1

package/templates/backend/nestjs/config.json

@@ -1,41 +1,43 @@
-{
-  "id": "nestjs",
-  "name": "NestJS Base",
-  "description": "Base NestJS server with TypeScript, security headers, and a health check",
-  "type": "base",
-  "scripts": {
-    "dev": "cross-env NODE_ENV=development nest start --watch",
-    "build": "nest build",
-    "start": "cross-env NODE_ENV=production {{runner}} dist/main.js",
-    "lint": "eslint src",
-    "lint:fix": "eslint src --fix",
-    "format": "prettier --write \"src/**/*.ts\"",
-    "type:check": "tsc --noEmit"
-  },
-  "dependencies": {
-    "@nestjs/common": "^12.1.2",
-    "@nestjs/core": "^12.1.2",
-    "@nestjs/platform-express": "^12.1.2",
-    "cross-env": "^10.1.0",
-    "dotenv": "^17.4.2",
-    "helmet": "^8.3.0",
-    "reflect-metadata": "^0.2.2",
-    "rxjs": "^7.8.2"
-  },
-  "devDependencies": {
-    "@eslint/js": "^10.0.1",
-    "@nestjs/cli": "^12.0.8",
-    "@nestjs/schematics": "^12.0.6",
-    "@trivago/prettier-plugin-sort-imports": "^6.0.2",
-    "@types/express": "^5.0.6",
-    "@types/node": "^24.13.3",
-    "eslint": "^10.10.0",
-    "eslint-config-prettier": "^10.1.8",
-    "prettier": "^3.9.6",
-    "typescript": "^6.0.3",
-    "typescript-eslint": "^8.69.0"
-  },
-  "envVars": {
-    "PORT": "3000"
-  }
-}
+{
+  "id": "nestjs",
+  "name": "NestJS Base",
+  "description": "Base NestJS server with TypeScript, security headers, and a health check",
+  "type": "base",
+  "scripts": {
+    "dev": "cross-env NODE_ENV=development nest start --watch",
+    "build": "nest build",
+    "start": "cross-env NODE_ENV=production {{runner}} dist/main.js",
+    "lint": "eslint src",
+    "lint:fix": "eslint src --fix",
+    "format": "prettier --write \"src/**/*.ts\"",
+    "type:check": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@nestjs/common": "^12.3.2",
+    "@nestjs/core": "^12.3.2",
+    "@nestjs/platform-express": "^12.3.2",
+    "cross-env": "^10.1.0",
+    "dotenv": "^17.4.2",
+    "helmet": "^8.3.0",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@nestjs/cli": "^12.0.11",
+    "@nestjs/schematics": "^12.0.12",
+    "@trivago/prettier-plugin-sort-imports": "^6.0.2",
+    "@types/express": "^5.0.6",
+    "@types/node": "^24.19.2",
+    "eslint": "^10.14.0",
+    "eslint-config-prettier": "^10.1.8",
+    "prettier": "^3.9.10",
+    "typescript": "^6.0.3",
+    "typescript-eslint": "^8.72.1"
+  },
+  "envVars": {
+    "PORT": "3000",
+    "CORS_ORIGIN": "*"
+  }
+}

package/templates/backend/nestjs/gitignore

@@ -34,3 +34,6 @@ coverage/
 
 # Misc
 *.tsbuildinfo
+
+# Prisma client, created by prisma generate
+src/generated/

package/templates/backend/nestjs/src/app.module.ts.hbs

@@ -1,7 +1,13 @@
 import { Module } from "@nestjs/common";
+{{#if useRateLimit}}
+import { APP_GUARD } from "@nestjs/core";
+{{/if}}
 {{#if (eq database 'mongoose')}}
 import { MongooseModule } from "@nestjs/mongoose";
 {{/if}}
+{{#if useRateLimit}}
+import { ThrottlerGuard, ThrottlerModule } from "@nestjs/throttler";
+{{/if}}
 
 {{#if useAuth}}
 import { AuthModule } from "./auth/auth.module.js";
@@ -28,7 +34,14 @@ import { PrismaModule } from "./prisma/prisma.module.js";
     {{#if useAuth}}
     AuthModule,
     {{/if}}
+    {{#if useRateLimit}}
+    // Every route except /health: 100 requests per client IP in 15 minutes
+    ThrottlerModule.forRoot([{ ttl: 15 * 60 * 1000, limit: 100 }]),
+    {{/if}}
   ],
   controllers: [HealthController],
+  {{#if useRateLimit}}
+  providers: [{ provide: APP_GUARD, useClass: ThrottlerGuard }],
+  {{/if}}
 })
 export class AppModule {}

package/templates/backend/nestjs/src/env.ts.hbs

@@ -0,0 +1,39 @@
+import "dotenv/config";
+import { z } from "zod";
+
+// Checked once at startup, so a missing or malformed variable stops the server
+// with a clear message instead of failing on the first request that needs it
+const envSchema = z.object({
+  PORT: z.coerce.number().int().positive().default(3000),
+  // "*" allows every origin; otherwise a comma-separated list of origins
+  CORS_ORIGIN: z
+    .string()
+    .default("*")
+    .transform((value) =>
+      value === "*" ? value : value.split(",").map((origin) => origin.trim())
+    ),
+{{#if (eq database 'prisma')}}
+  DATABASE_URL: z.url(),
+{{/if}}
+{{#if (eq database 'drizzle')}}
+  DATABASE_URL: z.url(),
+{{/if}}
+{{#if (eq database 'mongoose')}}
+  MONGODB_URI: z.url(),
+{{/if}}
+{{#if useAuth}}
+  JWT_SECRET: z.string().min(32, "JWT_SECRET must be at least 32 characters"),
+  JWT_EXPIRES_IN: z.string().default("1h"),
+{{/if}}
+});
+
+const result = envSchema.safeParse(process.env);
+
+if (!result.success) {
+  console.error(
+    `Invalid environment variables:\n${z.prettifyError(result.error)}`
+  );
+  process.exit(1);
+}
+
+export const env = result.data;

package/templates/backend/nestjs/src/health/{health.controller.ts → health.controller.ts.hbs}

@@ -1,5 +1,13 @@
 import { Controller, Get } from "@nestjs/common";
+{{#if useRateLimit}}
+import { SkipThrottle } from "@nestjs/throttler";
+{{/if}}
 
+{{#if useRateLimit}}
+// Docker and load balancers call the health check on a schedule, so it is not
+// counted
+@SkipThrottle()
+{{/if}}
 @Controller("health")
 export class HealthController {
   @Get()

package/templates/backend/nestjs/src/main.ts

@@ -4,13 +4,14 @@ import "dotenv/config";
 import helmet from "helmet";
 
 import { AppModule } from "./app.module.js";
+import { env } from "./env.js";
 
 async function bootstrap(): Promise<void> {
   const app = await NestFactory.create(AppModule);
-  const port = process.env.PORT ?? 3000;
+  const port = env.PORT;
 
   app.use(helmet());
-  app.enableCors();
+  app.enableCors({ origin: env.CORS_ORIGIN });
   // Lets modules close database connections when the process is stopped
   app.enableShutdownHooks();
 

package/templates/frontend/nextjs/app/page.tsx.hbs

@@ -1,97 +1,98 @@
-import Link from "next/link";
-
-import { ArrowRight } from "lucide-react";
-
-import { buttonVariants } from "@/components/ui/button";
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { cn } from "@/lib/utils";
-
-const featureList = [
-  "Next.js 16 App Router",
-  "React 19 and TypeScript",
-  "Tailwind CSS v4",
-  {{#if useAuth}}"Better Auth-ready session flow",{{/if}}
-  {{#if (eq database "prisma")}}"Prisma database tooling",{{/if}}
-  {{#if (eq database "drizzle")}}"Drizzle database tooling",{{/if}}
-];
-
-export default function Home() {
-  return (
-    <main className="min-h-screen bg-background text-foreground">
-      <div className="mx-auto flex min-h-screen max-w-6xl flex-col justify-center gap-12 px-6 py-16 sm:px-10 lg:px-12">
-        <section className="grid gap-10 lg:grid-cols-[1.2fr_0.8fr] lg:items-center">
-          <div className="space-y-6">
-            <span className="inline-flex w-fit items-center rounded-full border border-border bg-card px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-muted-foreground shadow-sm">
-              Created with better-ts-stack
-            </span>
-            <div className="space-y-4">
-              <h1 className="max-w-3xl text-4xl font-semibold tracking-tight sm:text-5xl">
-                Ship your stack faster with a polished TypeScript foundation.
-              </h1>
-              <p className="max-w-2xl text-base leading-7 text-muted-foreground sm:text-lg">
-                Your project already includes the core app shell, database wiring,
-                and a shadcn-compatible UI foundation so you can keep building
-                instead of setting up boilerplate.
-              </p>
-            </div>
-            <div className="flex flex-col gap-3 sm:flex-row">
-              {{#if useAuth}}
-              <Link
-                href="/sign-up"
-                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
-              >
-                Create an account
-                <ArrowRight className="size-4" />
-              </Link>
-              <Link
-                href="/sign-in"
-                className={buttonVariants({ variant: "outline", size: "lg" })}
-              >
-                Login
-              </Link>
-              {{else}}
-              <Link
-                href="https://github.com/Abdullah-dev0/better-ts-stack"
-                target="_blank"
-                rel="noreferrer"
-                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
-              >
-                Explore the docs
-                <ArrowRight className="size-4" />
-              </Link>
-              <Link
-                href="https://nextjs.org/docs"
-                target="_blank"
-                rel="noreferrer"
-                className={buttonVariants({ variant: "outline", size: "lg" })}
-              >
-                Next.js guide
-              </Link>
-              {{/if}}
-            </div>
-          </div>
-
-          <Card className="border-border bg-card shadow-sm">
-            <CardHeader>
-              <CardTitle>Included in this starter</CardTitle>
-            </CardHeader>
-            <CardContent className="space-y-4">
-              <ul className="space-y-3 text-sm text-muted-foreground">
-                {featureList.map((feature) => (
-                  <li key={feature} className="flex items-center gap-3">
-                    <span className="size-2 rounded-full bg-primary" />
-                    <span>{feature}</span>
-                  </li>
-                ))}
-              </ul>
-              <div className="rounded-2xl border border-border bg-muted px-4 py-3 text-sm text-muted-foreground">
-                Start editing <code className="font-mono">app/page.tsx</code> and
-                shape the project around your product instead of setup chores.
-              </div>
-            </CardContent>
-          </Card>
-        </section>
-      </div>
-    </main>
-  );
-}
+import Link from "next/link";
+
+import { ArrowRight } from "lucide-react";
+
+import { buttonVariants } from "@/components/ui/button";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { cn } from "@/lib/utils";
+
+const featureList = [
+  "Next.js 16 App Router",
+  "React 19 and TypeScript",
+  "Tailwind CSS v4",
+  {{#if useAuth}}"Better Auth-ready session flow",{{/if}}
+  {{#if (eq database "prisma")}}"Prisma database tooling",{{/if}}
+  {{#if (eq database "drizzle")}}"Drizzle database tooling",{{/if}}
+  {{#if (eq database "mongoose")}}"Mongoose database tooling",{{/if}}
+];
+
+export default function Home() {
+  return (
+    <main className="min-h-screen bg-background text-foreground">
+      <div className="mx-auto flex min-h-screen max-w-6xl flex-col justify-center gap-12 px-6 py-16 sm:px-10 lg:px-12">
+        <section className="grid gap-10 lg:grid-cols-[1.2fr_0.8fr] lg:items-center">
+          <div className="space-y-6">
+            <span className="inline-flex w-fit items-center rounded-full border border-border bg-card px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-muted-foreground shadow-sm">
+              Created with better-ts-stack
+            </span>
+            <div className="space-y-4">
+              <h1 className="max-w-3xl text-4xl font-semibold tracking-tight sm:text-5xl">
+                Ship your stack faster with a polished TypeScript foundation.
+              </h1>
+              <p className="max-w-2xl text-base leading-7 text-muted-foreground sm:text-lg">
+                Your project already includes the core app shell, database wiring,
+                and a shadcn-compatible UI foundation so you can keep building
+                instead of setting up boilerplate.
+              </p>
+            </div>
+            <div className="flex flex-col gap-3 sm:flex-row">
+              {{#if useAuth}}
+              <Link
+                href="/sign-up"
+                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
+              >
+                Create an account
+                <ArrowRight className="size-4" />
+              </Link>
+              <Link
+                href="/sign-in"
+                className={buttonVariants({ variant: "outline", size: "lg" })}
+              >
+                Login
+              </Link>
+              {{else}}
+              <Link
+                href="https://better-ts-stack.abdullahtech.me/docs"
+                target="_blank"
+                rel="noreferrer"
+                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
+              >
+                Explore the docs
+                <ArrowRight className="size-4" />
+              </Link>
+              <Link
+                href="https://nextjs.org/docs"
+                target="_blank"
+                rel="noreferrer"
+                className={buttonVariants({ variant: "outline", size: "lg" })}
+              >
+                Next.js guide
+              </Link>
+              {{/if}}
+            </div>
+          </div>
+
+          <Card className="border-border bg-card shadow-sm">
+            <CardHeader>
+              <CardTitle>Included in this starter</CardTitle>
+            </CardHeader>
+            <CardContent className="space-y-4">
+              <ul className="space-y-3 text-sm text-muted-foreground">
+                {featureList.map((feature) => (
+                  <li key={feature} className="flex items-center gap-3">
+                    <span className="size-2 rounded-full bg-primary" />
+                    <span>{feature}</span>
+                  </li>
+                ))}
+              </ul>
+              <div className="rounded-2xl border border-border bg-muted px-4 py-3 text-sm text-muted-foreground">
+                Start editing <code className="font-mono">app/page.tsx</code> and
+                shape the project around your product instead of setup chores.
+              </div>
+            </CardContent>
+          </Card>
+        </section>
+      </div>
+    </main>
+  );
+}

package/templates/frontend/nextjs/config.json

@@ -13,25 +13,23 @@
   "dependencies": {
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "lucide-react": "^1.41.0",
-    "next": "^16.3.4",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
-    "tailwind-merge": "^3.6.0",
-    "@radix-ui/react-slot": "^1.3.3"
+    "lucide-react": "^1.66.0",
+    "next": "^16.4.3",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
+    "tailwind-merge": "^3.7.0",
+    "@radix-ui/react-slot": "^1.5.0"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4.3.3",
-    "@types/node": "^24.13.3",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.7",
-    "eslint": "^10.10.0",
-    "eslint-config-next": "^16.3.4",
+    "@types/node": "^24.19.2",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "eslint": "^10.14.0",
+    "eslint-config-next": "^16.4.3",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "@eslint/compat": "^2.1.1"
   },
-  "envVars": {
-    "PORT": "3000"
-  }
+  "envVars": {}
 }

package/templates/frontend/nextjs/gitignore

@@ -40,3 +40,6 @@ yarn-error.log*
 # typescript
 *.tsbuildinfo
 next-env.d.ts
+
+# Prisma client, created by prisma generate
+/generated/

package/templates/frontend/tanstack/config.json

@@ -6,38 +6,38 @@
   "scripts": {
     "dev": "vite dev",
     "build": "vite build",
-    "start": "srvx --prod -s ../client dist/server/server.js",
+    "start": "node --env-file-if-exists=.env .output/server/index.mjs",
     "preview": "vite preview",
     "type:check": "tsc --noEmit",
     "lint": "eslint src"
   },
   "dependencies": {
-    "@tanstack/react-query": "^5.104.3",
-    "@tanstack/react-query-devtools": "^5.104.3",
-    "@tanstack/react-router": "^1.170.45",
+    "@tanstack/react-query": "^5.105.0",
+    "@tanstack/react-query-devtools": "^5.105.0",
+    "@tanstack/react-router": "^1.170.46",
     "@tanstack/react-router-devtools": "^1.167.2",
     "@tanstack/react-router-ssr-query": "^1.167.3",
-    "@tanstack/react-start": "^1.169.3",
+    "@tanstack/react-start": "^1.169.4",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "lucide-react": "^1.41.0",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
-    "srvx": "^1.0.5",
-    "tailwind-merge": "^3.6.0"
+    "lucide-react": "^1.66.0",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
+    "tailwind-merge": "^3.7.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@tailwindcss/vite": "^4.3.3",
-    "@types/node": "^24.13.3",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.7",
+    "@types/node": "^24.19.2",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
     "@vitejs/plugin-react": "^6.1.2",
-    "eslint": "^10.10.0",
+    "eslint": "^10.14.0",
+    "nitro": "^3.0.261029-rc",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.69.0",
-    "vite": "^8.3.4"
+    "typescript-eslint": "^8.72.1",
+    "vite": "^8.3.5"
   },
   "envVars": {
     "PORT": "3000"

package/templates/frontend/tanstack/gitignore

@@ -37,3 +37,6 @@ yarn-error.log*
 
 # typescript
 *.tsbuildinfo
+
+# Prisma client, created by prisma generate
+/generated/