create-nexst-monorepo 0.1.0

package/template/apps/web/kustomize/base/deployment.yaml

@@ -0,0 +1,60 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nexst-web
+spec:
+  replicas: 1
+  selector:
+    matchLabels: {}
+  template:
+    spec:
+      serviceAccountName: ghcr-puller
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: nexst-web
+          image: nexst-web
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 3000
+              protocol: TCP
+          envFrom:
+            - configMapRef:
+                name: nexst-web-config
+          volumeMounts:
+            - name: tmp
+              mountPath: /tmp
+          livenessProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          resources:
+            requests:
+              memory: 256Mi
+              cpu: 250m
+            limits:
+              memory: 512Mi
+              cpu: 1000m
+          securityContext:
+            allowPrivilegeEscalation: false
+            runAsNonRoot: true
+            runAsUser: 10001
+            runAsGroup: 10001
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: [ALL]
+            seccompProfile:
+              type: RuntimeDefault
+      volumes:
+        - name: tmp
+          emptyDir: {}

package/template/apps/web/kustomize/base/kustomization.yaml

@@ -0,0 +1,17 @@
+labels:
+  - pairs:
+      app.kubernetes.io/name: nexst-web
+      app.kubernetes.io/part-of: nexst
+      app.kubernetes.io/managed-by: kustomize
+      app.kubernetes.io/created-by: your-org
+      app.kubernetes.io/component: web
+    includeSelectors: true
+
+resources:
+  - deployment.yaml
+  - service.yaml
+
+configMapGenerator:
+  - name: nexst-web-config
+    envs:
+      - application.properties

package/template/apps/web/kustomize/base/service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nexst-web
+spec:
+  ports:
+    - name: http
+      port: 80
+      targetPort: 3000
+      protocol: TCP

package/template/apps/web/kustomize/overlays/prod/kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+namespace: nexst
+
+images:
+  - name: nexst-web
+    newName: ghcr.io/your-org/nexst-web
+    newTag: latest

package/template/apps/web/kustomize/overlays/staging/application.properties

@@ -0,0 +1,2 @@
+NEXT_PUBLIC_API_URL=https://api.staging.example.com
+NEXT_PUBLIC_HOST_URL=https://staging.example.com

package/template/apps/web/kustomize/overlays/staging/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+namespace: nexst-staging
+
+images:
+  - name: nexst-web
+    newName: ghcr.io/your-org/nexst-web
+    newTag: test
+
+configMapGenerator:
+  - name: nexst-web-config
+    behavior: merge
+    envs:
+      - application.properties

package/template/apps/web/messages/de.json

@@ -0,0 +1,124 @@
+{
+  "Common": {
+    "a11y": {
+      "hidePassword": "Passwort verbergen",
+      "showPassword": "Passwort anzeigen",
+      "close": "Schließen",
+      "scrollUp": "Nach oben scrollen",
+      "scrollDown": "Nach unten scrollen",
+      "clearSearch": "Suche leeren"
+    },
+    "cancel": "Abbrechen"
+  },
+  "Header": {
+    "navigation": "Hauptnavigation",
+    "toggleTheme": "Dunkelmodus umschalten",
+    "dashboard": "Dashboard",
+    "signIn": "Anmelden",
+    "signOut": "Abmelden"
+  },
+  "Home": {
+    "title": "Deine nächste Idee auf solidem Fundament",
+    "description": "Next.js, NestJS und Prisma – verdrahtet mit Linting, Tests, Docker-Images und CI.",
+    "cta": "Loslegen"
+  },
+  "Dashboard": {
+    "title": "Dashboard",
+    "signedInAs": "Angemeldet als {email}.",
+    "unverified": "Deine E-Mail-Adresse ist noch nicht bestätigt. Sieh in deinem Postfach nach dem Bestätigungslink."
+  },
+  "Auth": {
+    "SignIn": {
+      "title": "Anmelden",
+      "emailLabel": "E-Mail",
+      "emailPlaceholder": "du@example.com",
+      "passwordLabel": "Passwort",
+      "forgotPassword": "Passwort vergessen?",
+      "submitButton": "Anmelden",
+      "noAccount": "Noch kein Konto?",
+      "signUpLink": "Jetzt erstellen"
+    },
+    "SignUp": {
+      "title": "Konto erstellen",
+      "nameLabel": "Name",
+      "emailLabel": "E-Mail",
+      "emailPlaceholder": "du@example.com",
+      "passwordLabel": "Passwort",
+      "confirmPasswordLabel": "Passwort bestätigen",
+      "submitButton": "Konto erstellen",
+      "haveAccount": "Schon ein Konto?",
+      "signInLink": "Anmelden"
+    },
+    "Google": {
+      "continueButton": "Mit Google fortfahren"
+    },
+    "Passkey": {
+      "signIn": "Mit Passkey anmelden",
+      "signingIn": "Warte auf Passkey…",
+      "title": "Passkeys",
+      "description": "Melde dich per Fingerabdruck, Gesicht, Geräte-PIN oder Sicherheitsschlüssel statt mit Passwort an.",
+      "defaultName": "Mein Passkey",
+      "add": "Passkey hinzufügen",
+      "loading": "Passkeys werden geladen…",
+      "empty": "Noch keine Passkeys.",
+      "fallbackName": "Passkey",
+      "createdAt": "Hinzugefügt am {date}",
+      "deleteLabel": "{name} löschen",
+      "added": "Passkey hinzugefügt",
+      "addError": "Der Passkey konnte nicht hinzugefügt werden. Bitte versuche es erneut.",
+      "deleted": "Passkey gelöscht",
+      "deleteError": "Der Passkey konnte nicht gelöscht werden. Bitte versuche es erneut."
+    },
+    "Recovery": {
+      "title": "Passwort zurücksetzen",
+      "description": "Gib deine E-Mail ein, wir schicken dir einen Link für ein neues Passwort.",
+      "emailLabel": "E-Mail",
+      "emailPlaceholder": "du@example.com",
+      "submitButton": "Link senden",
+      "emailSent": "Falls ein Konto mit dieser E-Mail existiert, ist der Link unterwegs.",
+      "backToSignIn": "Zurück zur Anmeldung"
+    },
+    "ResetPassword": {
+      "title": "Neues Passwort wählen",
+      "passwordLabel": "Neues Passwort",
+      "confirmPasswordLabel": "Neues Passwort bestätigen",
+      "submitButton": "Passwort speichern",
+      "invalidLink": "Dieser Link ist ungültig oder abgelaufen. Fordere einen neuen an."
+    },
+    "Verify": {
+      "title": "Sieh in dein Postfach",
+      "description": "Wir haben dir einen Link zur Bestätigung deiner E-Mail-Adresse geschickt.",
+      "resendButton": "E-Mail erneut senden",
+      "resent": "E-Mail gesendet"
+    },
+    "Errors": {
+      "emailInvalid": "Gib eine gültige E-Mail-Adresse ein.",
+      "nameRequired": "Gib deinen Namen ein.",
+      "passwordRequired": "Gib dein Passwort ein.",
+      "passwordTooShort": "Verwende mindestens 8 Zeichen.",
+      "confirmPasswordRequired": "Bestätige dein Passwort.",
+      "passwordsMustMatch": "Die Passwörter stimmen nicht überein.",
+      "invalidCredentials": "E-Mail oder Passwort ist falsch.",
+      "emailAlreadyExists": "Mit dieser E-Mail gibt es bereits ein Konto.",
+      "networkError": "Der Server ist nicht erreichbar. Prüfe deine Verbindung und versuche es erneut.",
+      "defaultError": "Etwas ist schiefgelaufen. Bitte versuche es erneut."
+    },
+    "divider": "oder"
+  },
+  "ApiErrors": {
+    "BAD_REQUEST": "Die Anfrage war ungültig.",
+    "CONFLICT": "Das kollidiert mit vorhandenen Daten.",
+    "EMAIL_NOT_VERIFIED": "Bestätige zuerst deine E-Mail-Adresse.",
+    "FORBIDDEN": "Das darfst du nicht.",
+    "INSUFFICIENT_ROLE": "Dein Konto hat darauf keinen Zugriff.",
+    "INTERNAL_SERVER_ERROR": "Bei uns ist etwas schiefgelaufen. Bitte versuche es erneut.",
+    "NETWORK_ERROR": "Der Server ist nicht erreichbar. Prüfe deine Verbindung und versuche es erneut.",
+    "NOT_FOUND": "Nicht gefunden.",
+    "SERVICE_UNAVAILABLE": "Der Dienst ist vorübergehend nicht verfügbar.",
+    "TOO_MANY_REQUESTS": "Zu viele Anfragen. Warte kurz und versuche es erneut.",
+    "UNAUTHORIZED": "Melde dich an, um fortzufahren.",
+    "UNPROCESSABLE_ENTITY": "Das konnte nicht verarbeitet werden.",
+    "VALIDATION_FAILED": "Einige Felder sind ungültig.",
+    "defaultError": "Etwas ist schiefgelaufen. Bitte versuche es erneut."
+  }
+}

package/template/apps/web/messages/en.json

@@ -0,0 +1,124 @@
+{
+  "Common": {
+    "a11y": {
+      "hidePassword": "Hide password",
+      "showPassword": "Show password",
+      "close": "Close",
+      "scrollUp": "Scroll up",
+      "scrollDown": "Scroll down",
+      "clearSearch": "Clear search"
+    },
+    "cancel": "Cancel"
+  },
+  "Header": {
+    "navigation": "Main",
+    "toggleTheme": "Toggle dark mode",
+    "dashboard": "Dashboard",
+    "signIn": "Sign in",
+    "signOut": "Sign out"
+  },
+  "Home": {
+    "title": "Ship your next idea on a solid foundation",
+    "description": "Next.js, NestJS and Prisma, wired together with linting, tests, Docker images and CI.",
+    "cta": "Get started"
+  },
+  "Dashboard": {
+    "title": "Dashboard",
+    "signedInAs": "Signed in as {email}.",
+    "unverified": "Your email address is not verified yet. Check your inbox for the confirmation link."
+  },
+  "Auth": {
+    "SignIn": {
+      "title": "Sign in",
+      "emailLabel": "Email",
+      "emailPlaceholder": "you@example.com",
+      "passwordLabel": "Password",
+      "forgotPassword": "Forgot password?",
+      "submitButton": "Sign in",
+      "noAccount": "No account yet?",
+      "signUpLink": "Create one"
+    },
+    "SignUp": {
+      "title": "Create an account",
+      "nameLabel": "Name",
+      "emailLabel": "Email",
+      "emailPlaceholder": "you@example.com",
+      "passwordLabel": "Password",
+      "confirmPasswordLabel": "Confirm password",
+      "submitButton": "Create account",
+      "haveAccount": "Already have an account?",
+      "signInLink": "Sign in"
+    },
+    "Google": {
+      "continueButton": "Continue with Google"
+    },
+    "Passkey": {
+      "signIn": "Sign in with a passkey",
+      "signingIn": "Waiting for passkey…",
+      "title": "Passkeys",
+      "description": "Sign in with your fingerprint, face, device PIN or a security key instead of a password.",
+      "defaultName": "My passkey",
+      "add": "Add passkey",
+      "loading": "Loading passkeys…",
+      "empty": "No passkeys yet.",
+      "fallbackName": "Passkey",
+      "createdAt": "Added {date}",
+      "deleteLabel": "Delete {name}",
+      "added": "Passkey added",
+      "addError": "The passkey could not be added. Please try again.",
+      "deleted": "Passkey deleted",
+      "deleteError": "The passkey could not be deleted. Please try again."
+    },
+    "Recovery": {
+      "title": "Reset your password",
+      "description": "Enter your email and we will send you a link to choose a new password.",
+      "emailLabel": "Email",
+      "emailPlaceholder": "you@example.com",
+      "submitButton": "Send reset link",
+      "emailSent": "If an account exists for this email, a reset link is on its way.",
+      "backToSignIn": "Back to sign in"
+    },
+    "ResetPassword": {
+      "title": "Choose a new password",
+      "passwordLabel": "New password",
+      "confirmPasswordLabel": "Confirm new password",
+      "submitButton": "Save password",
+      "invalidLink": "This reset link is invalid or has expired. Request a new one."
+    },
+    "Verify": {
+      "title": "Check your inbox",
+      "description": "We sent you a link to confirm your email address.",
+      "resendButton": "Resend email",
+      "resent": "Email sent"
+    },
+    "Errors": {
+      "emailInvalid": "Enter a valid email address.",
+      "nameRequired": "Enter your name.",
+      "passwordRequired": "Enter your password.",
+      "passwordTooShort": "Use at least 8 characters.",
+      "confirmPasswordRequired": "Confirm your password.",
+      "passwordsMustMatch": "The passwords do not match.",
+      "invalidCredentials": "Invalid email or password.",
+      "emailAlreadyExists": "An account with this email already exists.",
+      "networkError": "Could not reach the server. Check your connection and try again.",
+      "defaultError": "Something went wrong. Please try again."
+    },
+    "divider": "or"
+  },
+  "ApiErrors": {
+    "BAD_REQUEST": "The request was invalid.",
+    "CONFLICT": "This conflicts with existing data.",
+    "EMAIL_NOT_VERIFIED": "Verify your email address first.",
+    "FORBIDDEN": "You are not allowed to do this.",
+    "INSUFFICIENT_ROLE": "Your account does not have access to this.",
+    "INTERNAL_SERVER_ERROR": "Something went wrong on our side. Please try again.",
+    "NETWORK_ERROR": "Could not reach the server. Check your connection and try again.",
+    "NOT_FOUND": "Not found.",
+    "SERVICE_UNAVAILABLE": "The service is temporarily unavailable.",
+    "TOO_MANY_REQUESTS": "Too many requests. Wait a moment and try again.",
+    "UNAUTHORIZED": "Sign in to continue.",
+    "UNPROCESSABLE_ENTITY": "This could not be processed.",
+    "VALIDATION_FAILED": "Some fields are invalid.",
+    "defaultError": "Something went wrong. Please try again."
+  }
+}

package/template/apps/web/next-env.d.ts

@@ -0,0 +1,7 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+import "./.next/types/root-params.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/template/apps/web/next.config.ts

@@ -0,0 +1,39 @@
+import bundleAnalyzer from "@next/bundle-analyzer";
+import type { NextConfig } from "next";
+import createNextIntlPlugin from "next-intl/plugin";
+
+const withBundleAnalyzer = bundleAnalyzer({
+  enabled: process.env.ANALYZE === "true",
+});
+
+const isProductionBuild = process.env.NODE_ENV === "production";
+
+const nextConfig: NextConfig = {
+  cacheComponents: true,
+  experimental: {
+    // The pod's root filesystem is read-only: keep ISR renders in memory instead of
+    // writing them to .next/server.
+    isrFlushToDisk: false,
+    optimizePackageImports: ["lucide-react"],
+    turbopackFileSystemCacheForDev: true,
+    useTypeScriptCli: true,
+  },
+  headers: async () => [
+    {
+      headers: [
+        { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
+        { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" },
+        { key: "X-Content-Type-Options", value: "nosniff" },
+        { key: "X-Frame-Options", value: "DENY" },
+      ],
+      source: "/(.*)",
+    },
+  ],
+  output: "standalone",
+  typescript: {
+    tsconfigPath: isProductionBuild ? "tsconfig.build.json" : "tsconfig.json",
+  },
+};
+
+const withNextIntl = createNextIntlPlugin();
+export default withBundleAnalyzer(withNextIntl(nextConfig));

package/template/apps/web/oxfmt.config.ts

@@ -0,0 +1,9 @@
+import { baseOxfmtConfig } from "@nexst/lint/oxfmt";
+import { baseIgnorePatterns } from "@nexst/lint/oxlint";
+import { defineConfig } from "oxfmt";
+
+export default defineConfig({
+  ...baseOxfmtConfig,
+  ignorePatterns: [...baseIgnorePatterns, ".next/**", "src/generated/**"],
+  sortTailwindcss: true,
+});

package/template/apps/web/oxlint.config.ts

@@ -0,0 +1,36 @@
+import base, { baseIgnorePatterns } from "@nexst/lint/oxlint";
+import { defineConfig } from "oxlint";
+
+export default defineConfig({
+  extends: [base],
+  ignorePatterns: [...baseIgnorePatterns, ".next/**", "src/generated/**"],
+  jsPlugins: ["eslint-plugin-storybook"],
+  overrides: [
+    {
+      files: ["**/config/**"],
+      rules: {
+        "sonarjs/no-duplicate-string": "off",
+      },
+    },
+    {
+      files: ["*.stories.tsx"],
+      rules: {
+        "storybook/await-interactions": "error",
+        "storybook/context-in-play-function": "error",
+        "storybook/default-exports": "warn",
+        "storybook/hierarchy-separator": "warn",
+        "storybook/no-title-property-in-meta": "warn",
+        "storybook/no-uninstalled-addons": "error",
+        "storybook/prefer-pascal-case": "warn",
+        "storybook/use-storybook-expect": "warn",
+        "storybook/use-storybook-testing-library": "warn",
+      },
+    },
+  ],
+  plugins: ["react", "nextjs", "jsx-a11y", "react-perf"],
+  rules: {
+    "typescript/no-floating-promises": "off",
+    "typescript/no-unnecessary-type-assertion": "warn",
+    "typescript/switch-exhaustiveness-check": "warn",
+  },
+});

package/template/apps/web/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@nexst/web",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "lint": "oxlint",
+    "lint:fix": "oxlint --fix",
+    "fmt": "oxfmt",
+    "fmt:check": "oxfmt --check",
+    "lint:ts": "tsc --noEmit",
+    "unused": "knip --no-config-hints",
+    "storybook": "storybook dev -p 6006",
+    "build-storybook": "storybook build",
+    "test:unit": "vitest run",
+    "test": "playwright test",
+    "test:ui": "playwright test --ui",
+    "test:report": "playwright show-report",
+    "codegen": "graphql-codegen -c src/lib/codegen.ts"
+  },
+  "dependencies": {
+    "@better-auth/passkey": "^1.7.6",
+    "@hookform/resolvers": "^5.9.1",
+    "@radix-ui/react-checkbox": "^1.3.11",
+    "@radix-ui/react-dialog": "^1.1.23",
+    "@radix-ui/react-dropdown-menu": "^2.1.24",
+    "@radix-ui/react-popover": "^1.1.23",
+    "@radix-ui/react-select": "^2.3.7",
+    "@radix-ui/react-tabs": "^1.1.21",
+    "@radix-ui/react-tooltip": "^1.2.16",
+    "@t3-oss/env-nextjs": "^0.13.11",
+    "@tanstack/react-query": "^5.104.0",
+    "better-auth": "^1.7.6",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "graphql": "^17.0.2",
+    "graphql-request": "^7.4.0",
+    "lucide-react": "^1.48.0",
+    "next": "^16.3.6",
+    "next-intl": "^4.14.7",
+    "next-themes": "^0.4.6",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
+    "react-hook-form": "^7.89.0",
+    "server-only": "^0.0.1",
+    "sonner": "^2.0.8",
+    "tailwind-merge": "^3.7.0",
+    "vaul": "^1.1.2",
+    "zod": "^4.6.5"
+  },
+  "devDependencies": {
+    "@axe-core/playwright": "^4.13.0",
+    "@graphql-codegen/cli": "^7.4.3",
+    "@graphql-codegen/client-preset": "^6.2.0",
+    "@graphql-codegen/typescript": "^6.1.0",
+    "@graphql-typed-document-node/core": "^3.2.0",
+    "@next/bundle-analyzer": "^16.3.6",
+    "@playwright/test": "^1.63.0",
+    "@storybook/addon-a11y": "^10.6.0",
+    "@storybook/addon-docs": "^10.6.0",
+    "@storybook/addon-themes": "^10.6.0",
+    "@storybook/addon-vitest": "^10.6.0",
+    "@storybook/nextjs-vite": "^10.6.0",
+    "@tailwindcss/postcss": "^4.3.3",
+    "@types/node": "^26.6.3",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitest/browser": "^5.0.2",
+    "@vitest/browser-playwright": "^5.0.2",
+    "eslint-plugin-storybook": "^10.6.0",
+    "playwright": "^1.63.0",
+    "postcss": "^8.5.28",
+    "storybook": "10.6.0",
+    "tailwindcss": "^4.3.3",
+    "tailwindcss-animate": "^1.0.7"
+  }
+}

package/template/apps/web/playwright.config.ts

@@ -0,0 +1,34 @@
+import { defineConfig, devices } from "@playwright/test";
+
+export default defineConfig({
+  forbidOnly: !!process.env.CI,
+  fullyParallel: true,
+  projects: [
+    {
+      name: "chromium",
+      use: { ...devices["Desktop Chrome"] },
+    },
+  ],
+  reporter: process.env.CI ? [["github"], ["html"]] : [["html"]],
+  retries: process.env.CI ? 2 : 0,
+  testDir: "tests",
+  use: {
+    baseURL: "http://localhost:3000",
+    screenshot: "only-on-failure",
+    trace: "retain-on-failure",
+  },
+
+  webServer: {
+    command: "bun run start",
+    env: {
+      NEXT_PUBLIC_API_URL: process.env.NEXT_PUBLIC_API_URL || "http://localhost:3001",
+      NEXT_PUBLIC_HOST_URL: process.env.NEXT_PUBLIC_HOST_URL || "http://localhost:3000",
+    },
+    reuseExistingServer: !process.env.CI,
+    stderr: "pipe",
+    stdout: "ignore",
+    url: "http://localhost:3000",
+  },
+
+  workers: process.env.CI ? 2 : 1,
+});

package/template/apps/web/postcss.config.mjs

@@ -0,0 +1,7 @@
+const config = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default config;

package/template/apps/web/sonar-project.properties

@@ -0,0 +1,9 @@
+sonar.projectKey=nexst-web
+sonar.projectVersion=1.0
+
+sonar.sources=src
+sonar.exclusions=src/generated/**,**/*.test.ts,**/*.stories.tsx
+sonar.tests=src,tests
+sonar.test.inclusions=**/*.test.ts,**/*.spec.ts,**/*.stories.tsx
+sonar.javascript.lcov.reportPaths=coverage/lcov.info
+sonar.typescript.tsconfigPath=tsconfig.json

package/template/apps/web/src/app/[locale]/(auth)/recovery/page.tsx

@@ -0,0 +1,22 @@
+import { getTranslations } from "next-intl/server";
+import { AuthCard } from "@/features/auth/auth-card";
+import { RecoveryForm } from "@/features/auth/recovery-form";
+import { Link } from "@/i18n/navigation";
+
+export default async function RecoveryPage() {
+  const t = await getTranslations("Auth.Recovery");
+
+  return (
+    <AuthCard
+      description={t("description")}
+      footer={
+        <Link className="text-link font-medium hover:underline" href="/sign-in">
+          {t("backToSignIn")}
+        </Link>
+      }
+      title={t("title")}
+    >
+      <RecoveryForm />
+    </AuthCard>
+  );
+}

package/template/apps/web/src/app/[locale]/(auth)/reset-password/page.tsx

@@ -0,0 +1,29 @@
+import { getTranslations } from "next-intl/server";
+import { Suspense } from "react";
+import { Alert } from "@/components/alert/alert";
+import { AuthCard } from "@/features/auth/auth-card";
+import { ResetPasswordForm } from "@/features/auth/reset-password-form";
+
+type Props = { searchParams: Promise<{ token?: string }> };
+
+export default async function ResetPasswordPage({ searchParams }: Props) {
+  const t = await getTranslations("Auth.ResetPassword");
+
+  return (
+    <AuthCard title={t("title")}>
+      <Suspense>
+        <ResetPasswordContent searchParams={searchParams} />
+      </Suspense>
+    </AuthCard>
+  );
+}
+
+async function ResetPasswordContent({ searchParams }: Props) {
+  const [{ token }, t] = await Promise.all([searchParams, getTranslations("Auth.ResetPassword")]);
+
+  return token ? (
+    <ResetPasswordForm token={token} />
+  ) : (
+    <Alert message={t("invalidLink")} variant="error" />
+  );
+}