Update: nueva version Horux Despachos

2026-04-27 22:09:36 -06:00
commit 6b36db1403
614 changed files with 125926 additions and 0 deletions
--- a/apps/api/src/config/env.ts
+++ b/apps/api/src/config/env.ts
@@ -0,0 +1,63 @@
+import { z } from 'zod';
+import { config } from 'dotenv';
+import { resolve } from 'path';
+
+// Load .env file from the api package root
+config({ path: resolve(process.cwd(), '.env') });
+
+const envSchema = z.object({
+  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
+  PORT: z.string().default('4000'),
+  DATABASE_URL: z.string(),
+  JWT_SECRET: z.string().min(32),
+  JWT_EXPIRES_IN: z.string().default('15m'),
+  JWT_REFRESH_EXPIRES_IN: z.string().default('7d'),
+  CORS_ORIGIN: z.string().default('http://localhost:3000'),
+
+  // Frontend URL (for MercadoPago back_url, emails, etc.)
+  FRONTEND_URL: z.string().default('https://horuxfin.com'),
+
+  // FIEL encryption (separate from JWT to allow independent rotation)
+  FIEL_ENCRYPTION_KEY: z.string().min(32),
+  FIEL_STORAGE_PATH: z.string().default('/var/horux/fiel'),
+
+  // MercadoPago
+  MP_ACCESS_TOKEN: z.string().optional(),
+  MP_WEBHOOK_SECRET: z.string().optional(),
+  MP_NOTIFICATION_URL: z.string().optional(),
+
+  // SMTP (Gmail Workspace)
+  SMTP_HOST: z.string().default('smtp.gmail.com'),
+  SMTP_PORT: z.string().default('587'),
+  SMTP_USER: z.string().optional(),
+  SMTP_PASS: z.string().optional(),
+  SMTP_FROM: z.string().default('Horux360 <noreply@horuxfin.com>'),
+
+  // Admin notification email
+  ADMIN_EMAIL: z.string().default('carlos@horuxfin.com'),
+
+  // Facturapi
+  FACTURAPI_USER_KEY: z.string().optional(),
+
+  // Cloudflare Tunnel (connector BYO-DB)
+  CLOUDFLARE_API_TOKEN: z.string().optional(),
+  CLOUDFLARE_ACCOUNT_ID: z.string().optional(),
+  CLOUDFLARE_TUNNEL_DOMAIN: z.string().default('tunnel.horux.mx'),
+
+  // KMS for encrypting DB connection strings and connector tokens
+  CONNECTOR_ENCRYPTION_KEY: z.string().optional(),
+});
+
+const parsed = envSchema.safeParse(process.env);
+
+if (!parsed.success) {
+  console.error('❌ Invalid environment variables:', parsed.error.flatten().fieldErrors);
+  process.exit(1);
+}
+
+export const env = parsed.data;
+
+// Parse CORS origins (comma-separated) into array
+export function getCorsOrigins(): string[] {
+  return env.CORS_ORIGIN.split(',').map(origin => origin.trim());
+}