- Add Express.js server with TypeScript - Configure Prisma ORM with PostgreSQL schema - Implement JWT authentication (register, login, logout, refresh) - Add rate limiting for auth endpoints (10 attempts/15min) - Password strength validation (8+ chars, uppercase, lowercase, number) - Events CRUD API (anniversaries and reminders) - Notes API (single note per user) - AI parse endpoint with DeepSeek integration - Security: Helmet, rate limiting, input validation, error handling - Fix: JWT_SECRET environment variable validation Code review: Architect approved Tests: Build verified
23 lines
444 B
Plaintext
23 lines
444 B
Plaintext
# Server
|
|
PORT=3000
|
|
NODE_ENV=development
|
|
|
|
# JWT
|
|
JWT_SECRET=your-super-secret-jwt-key-change-in-production
|
|
JWT_EXPIRES_IN=7d
|
|
JWT_REFRESH_EXPIRES_IN=30d
|
|
|
|
# Database (腾讯云PostgreSQL)
|
|
DB_HOST=postgres.ap-shanghai.myqcloud.com
|
|
DB_PORT=5432
|
|
DB_NAME=qia
|
|
DB_USER=qia_admin
|
|
DB_PASSWORD=your-database-password
|
|
|
|
# DeepSeek AI
|
|
DEEPSEEK_API_KEY=sk-xxx
|
|
DEEPSEEK_API_URL=https://api.deepseek.com/chat/completions
|
|
|
|
# CORS
|
|
CORS_ORIGIN=http://localhost:5173
|