first commit

.env.example

@@ -0,0 +1,59 @@
+# ============================================================================
+# Krow backend — example environment
+#
+# Copy to .env and fill in. .env is gitignored and must never be committed.
+# Every value below is a placeholder or a safe local default: no real password,
+# API key or token belongs in this file.
+#
+#   cp .env.example .env
+# ============================================================================
+
+# ── Application ─────────────────────────────────────────────────────────────
+APP_ENV=development          # development | staging | production
+LOG_LEVEL=info               # debug | info | warn | error
+
+# ── HTTP server ─────────────────────────────────────────────────────────────
+HTTP_HOST=127.0.0.1
+HTTP_PORT=8080
+HTTP_READ_TIMEOUT=15s
+HTTP_WRITE_TIMEOUT=30s
+HTTP_IDLE_TIMEOUT=60s
+HTTP_SHUTDOWN_TIMEOUT=10s
+# Browser origins allowed to call this API cross-origin, comma-separated.
+# Unset in development it defaults to the Vite dev server on both hostnames
+# (localhost and 127.0.0.1 are different origins to a browser) plus `vite
+# preview`. Unset anywhere else it defaults to empty, meaning same-origin only.
+# Origins are matched exactly, echoed back one at a time, and "*" is rejected.
+# HTTP_CORS_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
+
+# ── PostgreSQL ──────────────────────────────────────────────────────────────
+# The local development database. DATABASE_NAME is mixed-case and hyphenated,
+# so anything that interpolates it into SQL must quote it: "Krow-force".
+DATABASE_HOST=127.0.0.1
+DATABASE_PORT=5432
+DATABASE_NAME=Krow-force
+DATABASE_USER=postgres
+DATABASE_PASSWORD=
+DATABASE_SCHEMA=public
+
+# sslmode: disable is fine for a loopback dev database. APP_ENV=production
+# rejects `disable` at startup — use require or verify-full there.
+DATABASE_SSLMODE=disable
+
+# Pool and timeout tuning.
+DATABASE_MAX_OPEN_CONNS=25
+DATABASE_MIN_IDLE_CONNS=2
+DATABASE_CONN_MAX_LIFETIME=30m
+DATABASE_CONNECT_TIMEOUT=5s
+DATABASE_STATEMENT_TIMEOUT=10s
+
+# ── Migrations ──────────────────────────────────────────────────────────────
+# Consumed by the Makefile, which builds the golang-migrate URL from the
+# DATABASE_* values above. Keep it pointed at the repository's migrations/.
+MIGRATIONS_DIR=./migrations
+
+# ── Seed ────────────────────────────────────────────────────────────────────
+# The demo fixture, generated from the frontend repository's src/api/seed.js.
+# The Makefile passes an absolute path; this default suits running from the
+# repository root.
+SEED_FIXTURE_PATH=./seed/fixtures/seed.json