API

Swagger is available at /api/docs.

Main routes:

• POST /api/auth/register — create a user
• POST /api/auth/login — receive a JWT access token
• GET /api/auth/me — return the authenticated user
• GET / — authenticated root endpoint

Use the returned JWT as a bearer token for protected routes.

TypeORM and migrations

TypeORM configuration lives in src/database/data-source.ts. Entities are loaded from src/**/*.entity.ts in development and dist/**/*.entity.js after build.

Create a migration:

yarn migration:create src/migrations/MigrationName

Run migrations:

yarn migration:run

Revert the last migration:

yarn migration:revert

Inside Docker, prefix commands with docker exec -it nest, for example:

docker exec -it nest yarn migration:run

DB_SYNC=true can be useful for throwaway local experiments, but do not use it in production because schema synchronization can cause data loss.

Scripts

yarn start        # run src/main.ts with ts-node
yarn start:dev    # run with nodemon
yarn start:debug  # run with nodemon debug config
yarn start:prod   # run compiled dist/main.js
yarn test         # unit tests
yarn test:watch   # unit tests in watch mode
yarn test:cov     # coverage
yarn test:e2e     # e2e tests
yarn format       # prettier over src/**/*.ts

Docker files

• docker-compose.yml — local development stack: NestJS app, nginx, MariaDB.
• docker-compose-swarm.yml — swarm-oriented deployment template.
• Dockerfile — development app image.
• Dockerfile-prod — production app image.
• Dockerfile-nginx — nginx reverse proxy image.

Notes

• Passwords are hashed with bcrypt through a TypeORM value transformer.
• Validation is enabled globally with Nest ValidationPipe and a custom trim pipe.
• CORS is open only in APP_ENV=dev when CORS_ALLOW_ORIGIN is empty.