first commit

ENV_SETUP.md

@@ -0,0 +1,98 @@
+# Environment Configuration
+
+Copy `.env.example` files and configure for your environment:
+
+## Backend (.env)
+
+```env
+# MongoDB
+MONGODB_URI=mongodb://admin:password@localhost:27017/noteapp?authSource=admin
+
+# JWT Configuration
+JWT_SECRET=your-super-secret-jwt-key-minimum-32-characters
+JWT_ISSUER=noteapp
+
+# Encryption (32 bytes = 32 characters)
+ENCRYPTION_KEY=00000000000000000000000000000000
+
+# Server
+PORT=8080
+ENV=development
+LOG_LEVEL=info
+
+# CORS (comma-separated for multiple origins)
+CORS_ALLOWED_ORIGINS=http://localhost:5173,http://localhost:3000
+
+# Rate Limiting
+RATE_LIMIT_REQUESTS=50
+RATE_LIMIT_WINDOW=1s
+```
+
+## Frontend (.env)
+
+```env
+VITE_API_BASE_URL=http://localhost:8080
+VITE_ENV=development
+```
+
+## Development vs Production
+
+### Development (.env.development)
+
+- Less strict security (for easier testing)
+- Localhost CORS allowed
+- JWT secrets can be simple
+- Logging more verbose
+
+### Production (.env.production)
+
+- Strict security requirements
+- Specific CORS origins only
+- Strong random JWT secrets
+- Limited logging (performance)
+- All environment variables must be set
+
+## Generating Secrets
+
+```bash
+# JWT Secret (32+ characters)
+openssl rand -base64 32
+
+# Encryption Key (32 bytes)
+openssl rand -hex 16  # outputs 32 characters
+
+# Random token
+openssl rand -hex 32
+```
+
+## Docker Compose
+
+Environment variables are defined in `docker-compose.yml` and will override `.env` files. Update the file for your deployment:
+
+```yaml
+environment:
+    MONGODB_URI: mongodb://admin:password@mongodb:27017/noteapp?authSource=admin
+    JWT_SECRET: your-secret-key-change-in-production
+    # ... other vars
+```
+
+## Kubernetes
+
+Use `kubectl create secret` for sensitive data:
+
+```bash
+# Create secret from literal values
+kubectl create secret generic app-secrets \
+  --from-literal=mongodb-uri="..." \
+  --from-literal=jwt-secret="..." \
+  -n noteapp
+
+# Or use ConfigMap for non-sensitive config
+kubectl create configmap app-config \
+  --from-file=config.yaml \
+  -n noteapp
+```
+
+---
+
+**IMPORTANT**: Never commit .env files or secrets to version control!