feat: full api server

.env.example

@@ -1,9 +1,52 @@
-# Server
+# ==================================
+# Database Configuration
+# ==================================
+
+# PostgreSQL database connection URL
+# Format: postgresql://username:password@host:port/database
+# Example: postgresql://postgres:password@localhost:5432/memohome
+DATABASE_URL=postgresql://username:password@localhost:5432/database_name
+
+
+# ==================================
+# API Server Configuration
+# ==================================
 API_SERVER_PORT=7002
 WEB_PORT=7003
 
 API_BASE_URL=http://localhost:7002
 WEB_URL=http://localhost:7003
 
-# Database (PostgreSQL)
-DATABASE_URL=
+
+# ==================================
+# Authentication Configuration
+# ==================================
+
+# Root user credentials (super admin)
+# This user is not stored in the database and has full admin privileges
+# Use a strong username and password in production
+ROOT_USER=admin
+ROOT_USER_PASSWORD=change_this_secure_password
+
+# JWT secret key for signing tokens
+# IMPORTANT: Use a long, random string in production (at least 32 characters)
+# You can generate one with: openssl rand -base64 32
+JWT_SECRET=your-jwt-secret-key-change-in-production-use-long-random-string
+
+# JWT token expiration time
+# Format: number + unit (s=seconds, m=minutes, h=hours, d=days)
+# Examples: 30m, 2h, 7d, 30d
+# Default: 7d (7 days)
+JWT_EXPIRES_IN=7d
+
+
+# ==================================
+# Optional: Development Configuration
+# ==================================
+
+# Node environment
+# Options: development, production, test
+NODE_ENV=development
+
+# Enable debug logging (optional)
+# DEBUG=true