Initial commit: Mana Collection NestJS backend.

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.example

@@ -0,0 +1,39 @@
+# PostgreSQL (Docker Compose)
+POSTGRES_HOST=localhost
+POSTGRES_PORT=5436
+POSTGRES_USER=mana
+POSTGRES_PASSWORD=mana_secret
+POSTGRES_DB=mana_collection
+
+DATABASE_URL=postgresql://mana:mana_secret@localhost:5436/mana_collection
+
+# API
+PORT=3002
+PUBLIC_SITE_ORIGIN=http://mana-collection.com:3000
+CORS_ORIGIN=http://localhost:3000,http://127.0.0.1:3000,http://mana-collection.com:3000,http://www.mana-collection.com:3000,http://store.mana-collection.com:3000,http://customer.mana-collection.com:3000,http://admin.mana-collection.com:3000,https://manacollections.ir,https://store.manacollections.ir,https://customer.manacollections.ir,https://admin.manacollections.ir
+
+# JWT
+JWT_ACCESS_SECRET=change-me-mana-access-secret-min-32-chars
+JWT_REFRESH_SECRET=change-me-mana-refresh-secret-min-32-chars
+JWT_ACCESS_EXPIRES_IN=15m
+JWT_REFRESH_EXPIRES_IN=7d
+
+# Object storage (same Parspack bucket as Mado/Balout — prefix mana-collection/)
+STORAGE_DISK=s3
+S3_ENDPOINT=https://c804387.parspack.net
+S3_BUCKET=c804387
+S3_PUBLIC_URL=https://c804387.parspack.net/c804387
+S3_REGION=us-east-1
+S3_FORCE_PATH_STYLE=true
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+
+MEDIA_MAX_FILE_SIZE_MB=10
+
+# Meshkee SMS (server-side only — never expose to frontend)
+# Add manacollections.ir to Meshkee SMS_PARTNERS with this API key
+MESHKEE_SMS_URL=https://api.meshkee.com/api/v1/public/sms/send
+MESHKEE_SMS_API_KEY=
+MESHKEE_SMS_DOMAIN=manacollections.ir
+# Comma-separated admin mobiles for alerts
+SMS_NOTIFY_MOBILES=