create-nexwire 4.3.0 → 4.4.0

package/fastify/src/framework/maker-cli/stubs/controller/openapi.ts.stub

@@ -0,0 +1,74 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+import { HttpStatusCodes } from "@/framework/facade.js";
+import { {{ServiceName}} } from "@/modules/{{module}}/services/{{controller}}.js";
+
+type IdRequest = FastifyRequest<{ Params: { id: number } }>;
+type BodyRequest = FastifyRequest<{ Body: Record<string, unknown> }>;
+type UpdateRequest = FastifyRequest<{ Params: { id: number }; Body: Record<string, unknown> }>;
+
+/**
+ * Why: Returns every {{controller}} row for list screens.
+ * When: Used by GET list endpoint.
+ * Where: GET /{{controller}} route.
+ */
+export const index = async (_request: FastifyRequest, reply: FastifyReply) => {
+  const data = await {{ServiceName}}.list();
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} list fetched successfully", data });
+};
+
+/**
+ * Why: Returns one {{controller}} row by validated route id.
+ * When: Used by detail screens or fetch-by-id calls.
+ * Where: GET /{{controller}}/:id route.
+ */
+export const show = async (request: IdRequest, reply: FastifyReply) => {
+  const data = await {{ServiceName}}.findOne(request.params.id);
+
+  if (!data) {
+    return reply.code(HttpStatusCodes.NOT_FOUND).send({ message: "{{controller}} not found" });
+  }
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} fetched successfully", data });
+};
+
+/**
+ * Why: Creates a new {{controller}} row from a validated request body.
+ * When: Used by create form submissions.
+ * Where: POST /{{controller}} route.
+ */
+export const store = async (request: BodyRequest, reply: FastifyReply) => {
+  const data = await {{ServiceName}}.create(request.body);
+
+  return reply.code(HttpStatusCodes.CREATED).send({ message: "{{controller}} created successfully", data });
+};
+
+/**
+ * Why: Updates an existing {{controller}} row using id + body validation.
+ * When: Used by edit/update form submissions.
+ * Where: PUT/PATCH /{{controller}}/:id route.
+ */
+export const update = async (request: UpdateRequest, reply: FastifyReply) => {
+  const data = await {{ServiceName}}.update(request.params.id, request.body);
+
+  if (!data) {
+    return reply.code(HttpStatusCodes.NOT_FOUND).send({ message: "{{controller}} not found" });
+  }
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} updated successfully", data });
+};
+
+/**
+ * Why: Deletes one {{controller}} row by validated route id.
+ * When: Used by delete actions.
+ * Where: DELETE /{{controller}}/:id route.
+ */
+export const destroy = async (request: IdRequest, reply: FastifyReply) => {
+  const data = await {{ServiceName}}.remove(request.params.id);
+
+  if (!data) {
+    return reply.code(HttpStatusCodes.NOT_FOUND).send({ message: "{{controller}} not found" });
+  }
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} deleted successfully" });
+};

package/fastify/src/framework/maker-cli/stubs/controller/plain.ts.stub

@@ -0,0 +1,77 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+import { HttpStatusCodes } from "@/framework/facade.js";
+import { validate } from "@/framework/facade.js";
+import { Create{{ClassName}}Schema, Update{{ClassName}}Schema, {{ClassName}}IdParamsSchema } from "@/modules/{{module}}/schemas/{{controller}}.js";
+import { {{ServiceName}} } from "@/modules/{{module}}/services/{{controller}}.js";
+
+/**
+ * Why: Returns every {{controller}} row for list screens.
+ * When: Used by GET list endpoint.
+ * Where: GET /{{controller}} route.
+ */
+export const index = async (_request: FastifyRequest, reply: FastifyReply) => {
+  const data = await {{ServiceName}}.list();
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} list fetched successfully", data });
+};
+
+/**
+ * Why: Returns one {{controller}} row by validated route id.
+ * When: Used by detail screens or fetch-by-id calls.
+ * Where: GET /{{controller}}/:id route.
+ */
+export const show = async (request: FastifyRequest, reply: FastifyReply) => {
+  const params = await validate({{ClassName}}IdParamsSchema, request.params);
+  const data = await {{ServiceName}}.findOne(params.id);
+
+  if (!data) {
+    return reply.code(HttpStatusCodes.NOT_FOUND).send({ message: "{{controller}} not found" });
+  }
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} fetched successfully", data });
+};
+
+/**
+ * Why: Creates a new {{controller}} row from a validated request body.
+ * When: Used by create form submissions.
+ * Where: POST /{{controller}} route.
+ */
+export const store = async (request: FastifyRequest, reply: FastifyReply) => {
+  const body = await validate(Create{{ClassName}}Schema, request.body);
+  const data = await {{ServiceName}}.create(body);
+
+  return reply.code(HttpStatusCodes.CREATED).send({ message: "{{controller}} created successfully", data });
+};
+
+/**
+ * Why: Updates an existing {{controller}} row using id + body validation.
+ * When: Used by edit/update form submissions.
+ * Where: PUT/PATCH /{{controller}}/:id route.
+ */
+export const update = async (request: FastifyRequest, reply: FastifyReply) => {
+  const params = await validate({{ClassName}}IdParamsSchema, request.params);
+  const body = await validate(Update{{ClassName}}Schema, request.body);
+  const data = await {{ServiceName}}.update(params.id, body);
+
+  if (!data) {
+    return reply.code(HttpStatusCodes.NOT_FOUND).send({ message: "{{controller}} not found" });
+  }
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} updated successfully", data });
+};
+
+/**
+ * Why: Deletes one {{controller}} row by validated route id.
+ * When: Used by delete actions.
+ * Where: DELETE /{{controller}}/:id route.
+ */
+export const destroy = async (request: FastifyRequest, reply: FastifyReply) => {
+  const params = await validate({{ClassName}}IdParamsSchema, request.params);
+  const data = await {{ServiceName}}.remove(params.id);
+
+  if (!data) {
+    return reply.code(HttpStatusCodes.NOT_FOUND).send({ message: "{{controller}} not found" });
+  }
+
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} deleted successfully" });
+};

package/fastify/src/framework/maker-cli/stubs/controller/standalone.ts.stub

@@ -0,0 +1,51 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+import { HttpStatusCodes } from "@/framework/facade.js";
+
+type IdRequest = FastifyRequest<{ Params: { id: number } }>;
+
+/**
+ * Why: Returns collection response shape for list pages.
+ * When: Used by GET list endpoint.
+ * Where: GET /{{controller}} route.
+ */
+export const index = async (_request: FastifyRequest, reply: FastifyReply) => {
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} list fetched successfully", data: [] });
+};
+
+/**
+ * Why: Returns one resource by validated route id.
+ * When: Used by detail screens or fetch-by-id calls.
+ * Where: GET /{{controller}}/:id route.
+ */
+export const show = async (request: IdRequest, reply: FastifyReply) => {
+  return reply
+    .code(HttpStatusCodes.OK)
+    .send({ message: "{{controller}} fetched successfully", data: { id: request.params.id, name: "" } });
+};
+
+/**
+ * Why: Creates a new resource from validated request body.
+ * When: Used by create form submissions.
+ * Where: POST /{{controller}} route.
+ */
+export const store = async (_request: FastifyRequest, reply: FastifyReply) => {
+  return reply.code(HttpStatusCodes.CREATED).send({ message: "{{controller}} created successfully" });
+};
+
+/**
+ * Why: Updates an existing resource using id + body validation.
+ * When: Used by edit/update form submissions.
+ * Where: PUT/PATCH /{{controller}}/:id route.
+ */
+export const update = async (_request: FastifyRequest, reply: FastifyReply) => {
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} updated successfully" });
+};
+
+/**
+ * Why: Deletes one resource by validated route id.
+ * When: Used by delete actions.
+ * Where: DELETE /{{controller}}/:id route.
+ */
+export const destroy = async (_request: FastifyRequest, reply: FastifyReply) => {
+  return reply.code(HttpStatusCodes.OK).send({ message: "{{controller}} deleted successfully" });
+};

package/fastify/src/framework/maker-cli/stubs/deploy/Dockerfile.bun.stub

@@ -0,0 +1,52 @@
+ARG BUN_VERSION=1.4.0
+FROM oven/bun:${BUN_VERSION}-slim AS builder
+
+WORKDIR /app
+
+ENV APP_URL=http://localhost:3000
+ARG UI=true
+ENV UI=${UI}
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  ca-certificates \
+  python3 \
+  make \
+  g++ \
+  && rm -rf /var/lib/apt/lists/*
+
+COPY package.json bun.lockb* bun.lock* package-lock.json* ./
+RUN bun install --frozen-lockfile
+
+COPY . .
+RUN cp deploy/.env .env || true
+RUN bun src/framework/maker-cli/index.mjs db:schema
+RUN bun run build
+
+FROM oven/bun:${BUN_VERSION}-slim AS runner
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV APP_URL=http://localhost:3000
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  supervisor \
+  ca-certificates \
+  && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/drizzle.config.ts ./drizzle.config.ts
+COPY --from=builder /app/tsconfig.json ./tsconfig.json
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/src ./src
+COPY --from=builder /app/deploy/scripts ./deploy/scripts
+COPY --from=builder /app/deploy/.env ./.env
+
+COPY deploy/supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+EXPOSE 3000
+
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+

package/fastify/src/framework/maker-cli/stubs/deploy/Dockerfile.pnpm.stub

@@ -0,0 +1,55 @@
+ARG NODE_VERSION=24
+FROM node:${NODE_VERSION}-bookworm-slim AS builder
+
+ARG PNPM_VERSION=10.33.2
+ARG UI=true
+ENV UI=${UI}
+
+WORKDIR /app
+
+ENV APP_URL=http://localhost:3000
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    python3 \
+    make \
+    g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN corepack enable && corepack prepare pnpm@${PNPM_VERSION} --activate
+
+COPY package.json pnpm-lock.yaml* ./
+RUN if [ -f pnpm-lock.yaml ]; then pnpm install --frozen-lockfile; else pnpm install --no-frozen-lockfile; fi
+
+COPY . .
+RUN node src/framework/maker-cli/index.mjs db:schema
+RUN pnpm run build
+
+FROM node:${NODE_VERSION}-bookworm-slim AS runner
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV APP_URL=http://localhost:3000
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    supervisor \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/drizzle.config.ts ./drizzle.config.ts
+COPY --from=builder /app/tsconfig.json ./tsconfig.json
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/src ./src
+COPY --from=builder /app/deploy/scripts ./deploy/scripts
+COPY --from=builder /app/deploy/.env ./.env
+
+COPY deploy/supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+EXPOSE 3000
+
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+

package/fastify/src/framework/maker-cli/stubs/deploy/Dockerfile.stub

@@ -0,0 +1,51 @@
+ARG NODE_VERSION=24
+FROM node:${NODE_VERSION}-bookworm-slim AS builder
+
+WORKDIR /app
+
+ENV APP_URL=http://localhost:3000
+ARG UI=true
+ENV UI=${UI}
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    python3 \
+    make \
+    g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY package.json package-lock.json* ./
+RUN if [ -f package-lock.json ]; then npm ci --legacy-peer-deps || npm install --legacy-peer-deps; else npm install --legacy-peer-deps; fi
+
+COPY . .
+RUN node src/framework/maker-cli/index.mjs db:schema
+RUN npm run build
+
+FROM node:${NODE_VERSION}-bookworm-slim AS runner
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV APP_URL=http://localhost:3000
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    supervisor \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/drizzle.config.ts ./drizzle.config.ts
+COPY --from=builder /app/tsconfig.json ./tsconfig.json
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/src ./src
+COPY --from=builder /app/deploy/scripts ./deploy/scripts
+COPY --from=builder /app/deploy/.env ./.env
+
+COPY deploy/supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+EXPOSE 3000
+
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+

package/fastify/src/framework/maker-cli/stubs/deploy/Dockerfile.yarn.stub

@@ -0,0 +1,55 @@
+ARG NODE_VERSION=24
+FROM node:${NODE_VERSION}-bookworm-slim AS builder
+
+ARG YARN_VERSION=1.22.22
+ARG UI=true
+ENV UI=${UI}
+
+WORKDIR /app
+
+ENV APP_URL=http://localhost:3000
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    python3 \
+    make \
+    g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN corepack enable && corepack prepare yarn@${YARN_VERSION} --activate
+
+COPY package.json yarn.lock* ./
+RUN yarn install --immutable
+
+COPY . .
+RUN node src/framework/maker-cli/index.mjs db:schema
+RUN yarn build
+
+FROM node:${NODE_VERSION}-bookworm-slim AS runner
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV APP_URL=http://localhost:3000
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    supervisor \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/drizzle.config.ts ./drizzle.config.ts
+COPY --from=builder /app/tsconfig.json ./tsconfig.json
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/src ./src
+COPY --from=builder /app/deploy/scripts ./deploy/scripts
+COPY --from=builder /app/deploy/.env ./.env
+
+COPY deploy/supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+EXPOSE 3000
+
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+

package/fastify/src/framework/maker-cli/stubs/deploy/README.stub

@@ -0,0 +1,59 @@
+# Deploy
+
+Generated from current project .env.
+
+- Database mode: {{DATABASE_MODE}}
+- Redis enabled: {{REDIS_STATUS}}
+- Runtime: {{RUNTIME_NAME}}
+
+## Prerequisites
+
+- External docker networks exist:
+
+```bash
+docker network create nginx-proxy || true
+docker network create infra || true
+```
+
+- Proxy stack from `server-setup` is running (jwilder + letsencrypt companion).
+
+## Start app stack
+
+```bash
+docker compose --env-file deploy/server/.env --env-file deploy/.env -f deploy/docker-compose.yml up -d --build
+```
+
+Equivalent maker command:
+
+```bash
+bun maker deploy:workflow --app-only
+```
+
+## DB Import
+
+Import SQL dump into local Docker container (auto-detects MySQL or PostgreSQL):
+
+```bash
+bun maker deploy:db:import --file=deploy/nexwire.sql --database=nexwire
+```
+
+PostgreSQL restores into a fresh database by default (drops and recreates the
+target database first). Pass `--no-drop` to keep the existing database.
+
+Import SQL dump into remote Docker container (auto-detects MySQL or PostgreSQL):
+
+```bash
+bun maker deploy:db:import:remote --config=deploy/workflow.remote.json --file=deploy/nexwire.sql --database=nexwire
+```
+
+## Runtime
+
+Supervisor starts:
+
+- API: `maker serve --prod --runtime={{RUNTIME_NAME}}`
+{{QUEUE_LINE}}- Scheduler: `maker schedule:work --prod --runtime={{RUNTIME_NAME}}`
+
+{{REDIS_NOTE}}
+
+This deploy style follows `server-setup` and `statistic_postgre` patterns (external `nginx-proxy` + `infra` networks).
+

package/fastify/src/framework/maker-cli/stubs/deploy/compose/mysql.server.stub

@@ -0,0 +1,45 @@
+name: ${COMPOSE_PROJECT_NAME:-nexwire}
+
+services:
+  app:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        UI: ${UI}
+    container_name: ${APP_NAME:-nexwire}-app
+    restart: unless-stopped
+    working_dir: /app
+    ports:
+      - "${APP_PORT:-3000}:3000"
+    expose:
+      - "3000"
+    env_file:
+      - .env
+    environment:
+      APP_ENV: production
+      APP_PORT: 3000
+      APP_URL: ${APP_URL:-http://localhost:3000}
+      DATABASE_URL: ${DATABASE_URL}
+{{REDIS_ENV_LINE}}      APP_HOST: ${APP_HOST:-localhost}
+      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
+      VIRTUAL_PORT: ${VIRTUAL_PORT:-3000}
+      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+    volumes:
+      - app-storage:/app/src/storage
+    networks:
+      - infra
+      - nginx-proxy
+
+volumes:
+  app-storage:
+
+networks:
+  infra:
+    external: true
+    name: infra
+  nginx-proxy:
+    external: true
+    name: nginx-proxy
+

package/fastify/src/framework/maker-cli/stubs/deploy/compose/postgres.server.stub

@@ -0,0 +1,45 @@
+name: ${COMPOSE_PROJECT_NAME:-nexwire}
+
+services:
+  app:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        UI: ${UI}
+    container_name: ${APP_NAME:-nexwire}-app
+    restart: unless-stopped
+    working_dir: /app
+    ports:
+      - "${APP_PORT:-3000}:3000"
+    expose:
+      - "3000"
+    env_file:
+      - .env
+    environment:
+      APP_ENV: production
+      APP_PORT: 3000
+      APP_URL: ${APP_URL:-http://localhost:3000}
+      DATABASE_URL: ${DATABASE_URL}
+{{REDIS_ENV_LINE}}      APP_HOST: ${APP_HOST:-localhost}
+      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
+      VIRTUAL_PORT: ${VIRTUAL_PORT:-3000}
+      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+    volumes:
+      - app-storage:/app/src/storage
+    networks:
+      - infra
+      - nginx-proxy
+
+volumes:
+  app-storage:
+
+networks:
+  infra:
+    external: true
+    name: infra
+  nginx-proxy:
+    external: true
+    name: nginx-proxy
+

package/fastify/src/framework/maker-cli/stubs/deploy/compose/sqlite.stub

@@ -0,0 +1,45 @@
+name: ${COMPOSE_PROJECT_NAME:-nexwire}
+
+services:
+  app:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        UI: ${UI}
+    container_name: ${APP_NAME:-nexwire}-app
+    restart: unless-stopped
+    working_dir: /app
+    ports:
+      - "${APP_PORT:-3000}:3000"
+    expose:
+      - "3000"
+    env_file:
+      - .env
+    environment:
+      APP_ENV: production
+      APP_PORT: 3000
+      APP_URL: ${APP_URL:-http://localhost:3000}
+      DATABASE_URL: ${DATABASE_URL}
+{{REDIS_ENV_LINE}}      APP_HOST: ${APP_HOST:-localhost}
+      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
+      VIRTUAL_PORT: ${VIRTUAL_PORT:-3000}
+      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+    volumes:
+      - app-storage:/app/src/storage
+    networks:
+      - infra
+      - nginx-proxy
+
+volumes:
+  app-storage:
+
+networks:
+  infra:
+    external: true
+    name: infra
+  nginx-proxy:
+    external: true
+    name: nginx-proxy
+

package/fastify/src/framework/maker-cli/stubs/deploy/env/mysql.server.stub

@@ -0,0 +1,68 @@
+# App deploy env template (shared for local + remote)
+# Local: use this as deploy/.env
+# Remote: use this as deploy/.env
+# Runtime settings (mail, storage, cors, log level, toggles, expiries) live in
+# src/config/*. Only app basics, secrets, and infra vars belong in this file.
+# ── App ────────────────────────────────────────────
+APP_ENV=production
+APP_NAME=nexwire
+APP_HOST=localhost
+APP_PORT=3000
+
+# Full public URL the app is served at (used for links, redirects, CORS)
+# Local: http://localhost:3000  |  Remote: https://your-domain.com
+APP_URL=http://localhost:3000
+
+# Run "db:migrate --seed" automatically on container start (true/false)
+AUTO_MIGRATE=true
+
+# UI origin (only needed when UI is on a different domain than API)
+# Leave empty if UI is served from the same APP_URL or UI=false
+FRONTEND_URL={{FRONTEND_URL}}
+
+# ── Reverse Proxy (nginx-proxy) ────────────────────
+# Remote only: nginx-proxy routes by VIRTUAL_HOST and auto-issues Let's Encrypt certs.
+# Leave empty for local-only deploys.
+VIRTUAL_HOST=
+VIRTUAL_PORT=3000
+LETSENCRYPT_HOST=
+LETSENCRYPT_EMAIL=
+
+# ── Database ───────────────────────────────────────
+# Set the password and database name to match deploy/server/.env
+DATABASE_URL=mysql://root:change-me-root@mysql-global:3306/nexwire
+
+# ── JWT Auth (expiries live in src/config/jwt.ts) ──
+JWT_ACCESS_SECRET={{JWT_ACCESS_SECRET}}
+JWT_REFRESH_SECRET={{JWT_REFRESH_SECRET}}
+
+# ── Cookie (name lives in src/config/cookie.ts) ────
+COOKIE_SECRET={{COOKIE_SECRET}}
+
+# ── Storage credentials (driver/disk/bucket live in src/config/storage.ts) ──
+STORAGE_ACCESS_KEY_ID={{STORAGE_ACCESS_KEY_ID}}
+STORAGE_SECRET_ACCESS_KEY={{STORAGE_SECRET_ACCESS_KEY}}
+
+# ── Mail credentials (host/port/encryption live in src/config/mail.ts) ──
+MAIL_USERNAME=
+MAIL_PASSWORD=
+
+# ── Redis ──────────────────────────────────────────
+# Enables/disables cache, session, queue, events, Queue Dashboard (all Redis-backed services)
+REDIS={{REDIS_ENABLED}}
+REDIS_URL=redis://redis-global:6379
+REDIS_PREFIX={{REDIS_PREFIX}}
+
+# ── Feature Toggle (build) ─────────────────────────
+# Enable/disable UI build and serving. Set false for API-only mode
+UI={{UI}}
+
+# ── Feature Toggle ─────────────────────────────────
+# OpenAPI / Scalar docs at /api-docs. Set true to enable.
+OPEN_API={{OPEN_API}}
+# Socket.IO realtime server. Set false to disable.
+SOCKET={{SOCKET}}
+# Security headers (CSP, HSTS, X-Frame). Set false to disable.
+SECURITY_HEADERS={{SECURITY_HEADERS}}
+
+