Fix Backend Issues #688-#690: Distributed Configuration, Error Handling, and Analytics Pipeline

.env.database.example

@@ -0,0 +1,44 @@
+# Database Connection Pool Optimization - Environment Configuration
+
+# Enhanced Connection Pool Settings
+# Production Environment (Recommended values)
+DATABASE_POOL_MAX=20
+DATABASE_POOL_MIN=2
+DATABASE_IDLE_TIMEOUT=30000
+DATABASE_CONNECTION_TIMEOUT=10000
+DATABASE_ACQUIRE_TIMEOUT=60000
+DATABASE_CREATE_TIMEOUT=30000
+DATABASE_DESTROY_TIMEOUT=5000
+DATABASE_REAP_INTERVAL=1000
+DATABASE_CREATE_RETRY_INTERVAL=200
+
+# Connection Validation and Health Checks
+DATABASE_VALIDATE_CONNECTIONS=true
+DATABASE_RUN_ON_CONNECT=true
+DATABASE_CONNECTION_MAX_USES=10000
+
+# Performance Tuning
+DATABASE_STATEMENT_TIMEOUT=30000
+DATABASE_QUERY_TIMEOUT=30000
+DATABASE_APP_NAME=strellerminds-backend
+
+# SSL Configuration (Production)
+DATABASE_SSL_REJECT_UNAUTHORIZED=true
+# DATABASE_SSL_CERT=/path/to/cert.pem
+# DATABASE_SSL_KEY=/path/to/key.pem
+# DATABASE_SSL_CA=/path/to/ca.pem
+
+# Pool Monitoring (Development Only)
+DATABASE_POOL_LOG=true
+
+# Development Environment (Lower values for testing)
+# DATABASE_POOL_MAX=5
+# DATABASE_POOL_MIN=1
+# DATABASE_IDLE_TIMEOUT=15000
+# DATABASE_CONNECTION_TIMEOUT=5000
+
+# High Load Environment (For traffic spikes)
+# DATABASE_POOL_MAX=50
+# DATABASE_POOL_MIN=5
+# DATABASE_IDLE_TIMEOUT=60000
+# DATABASE_CONNECTION_TIMEOUT=15000

.env.development

@@ -3,18 +3,18 @@ PORT=3000
 
 DATABASE_HOST=localhost
 DATABASE_PORT=5432
-DATABASE_USER=Lagodxy
-DATABASE_PASSWORD=4633922uw8w8w8w
-DATABASE_NAME=StrellerMinds
+DATABASE_USER=your_database_user_here
+DATABASE_PASSWORD=your_database_password_here
+DATABASE_NAME=your_database_name_here
 
 # Authentication
-JWT_SECRET=mysecretJourney
+JWT_SECRET=your_jwt_secret_here
 
-#Claudinary Credentials 
-CLOUDINARY_CLOUD_NAME=ds3czwdtg
-CLOUDINARY_API_KEY=377545627931675
-CLOUDINARY_API_SECRET=pFrg1_s63mhEQ_v9w-IVdDFq3jE
-STELLAR_SECRET_KEY="jgjxvsjxvwjxsjxgskjxksmxjswkxwgxwdcj"
+#Cloudinary Credentials 
+CLOUDINARY_CLOUD_NAME=your_cloud_name_here
+CLOUDINARY_API_KEY=your_cloudinary_api_key_here
+CLOUDINARY_API_SECRET=your_cloudinary_api_secret_here
+STELLAR_SECRET_KEY=your_stellar_secret_key_here
 
 NODE_ENV=development
 EMAIL_ENABLED=false

.env.example

@@ -1,12 +1,15 @@
+# WARNING: Never commit real credentials to version control.
+# Copy this file to .env and fill in your actual values.
+# Use a secrets manager (e.g., AWS Secrets Manager, Vault) in production.
 DATABASE_HOST=localhost
 DATABASE_PORT=5432
-DATABASE_USER=postgres
-DATABASE_PASSWORD=adetomi.54
-DATABASE_NAME=streller_minds
+DATABASE_USER=your_database_user_here
+DATABASE_PASSWORD=your_database_password_here
+DATABASE_NAME=your_database_name_here
 
 # JWT Configuration
-JWT_SECRET=your_super_secret_jwt_key_here_change_in_production
-JWT_REFRESH_SECRET=your_super_secret_refresh_key_here_change_in_production
+JWT_SECRET=secure_placeholder_32_characters_minimum_1
+JWT_REFRESH_SECRET=secure_placeholder_32_characters_minimum_2
 JWT_EXPIRES_IN=15m
 JWT_REFRESH_EXPIRES_IN=7d
 JWT_EMAIL_EXPIRES_IN=24h
@@ -33,12 +36,37 @@ CLOUDINARY_API_KEY=your_api_key
 CLOUDINARY_API_SECRET=your_api_secret
 
 # Stellar Soroban Configuration
+# SECURITY: Never commit real credentials. Use a secrets manager in production.
 SOROBAN_RPC_URL=https://soroban-testnet.stellar.org
 STELLAR_NETWORK=TESTNET
-CREDENTIAL_CONTRACT_ID=CC...your_contract_id_here...
-
-# Key Management (In production, use a secure key management service)
-SIGNER_SECRET_KEY=S...your_secret_key_here...
+CREDENTIAL_CONTRACT_ID=<your_contract_id_here>
+
+# Key Management - CRITICAL SECURITY NOTICE
+# ⚠️ NEVER use production keys in development environments
+# ⚠️ Store keys in a secure key management service (AWS Secrets Manager, HashiCorp Vault, etc.)
+# ⚠️ Use separate key pairs for different environments (dev, staging, prod)
+# ⚠️ Rotate keys regularly and monitor for unauthorized access
+# ⚠️ For testnet: Generate test keys at https://laboratory.stellar.org
+#
+# STELLAR BLOCKCHAIN SECURITY BEST PRACTICES
+# =====================================================
+# 1. NEVER commit real secret keys to version control
+# 2. Use a secrets manager: AWS Secrets Manager, HashiCorp Vault, Azure Key Vault
+# 3. Generate separate key pairs for each environment (dev, staging, prod)
+# 4. Implement key rotation policies (recommended: every 90 days)
+# 5. Monitor key usage and set up alerts for unauthorized access
+# 6. Use hardware security modules (HSM) for production when possible
+# 7. Implement multi-signature schemes for high-value operations
+# 8. For testnet development: https://laboratory.stellar.org
+# 9. Regular security audits of key storage and access patterns
+# 10. Have a key compromise response plan in place
+#
+# Key Format: S + 55 uppercase alphanumeric characters (56 total)
+# Example (DO NOT USE): SABCDEFGHIJKLMNOPQRSTUVWXYZ234567ABCDEFGHIJKLMNOPQRSTUV
+#
+# Security Validation: The application validates key format on startup.
+# If you see validation errors, ensure you're using a properly formatted key from a secure source.
+SIGNER_SECRET_KEY=<STEWARD_SECRET_KEY_PLACEHOLDER_REPLACE_IN_PRODUCTION>
 
 # Connection Pool Settings
 DATABASE_POOL_MAX=10
@@ -55,6 +83,36 @@ BACKUP_RETENTION_DAYS=30
 BACKUP_MONTHLY_RETENTION_MONTHS=12
 BACKUP_VERIFICATION_ENABLED=true
 
+# Backup Encryption
+BACKUP_ENCRYPTION_ENABLED=true
+BACKUP_ENCRYPTION_KEY=your-32-byte-base64-encoded-encryption-key-here
+
+# Backup Cloud Storage (S3)
+BACKUP_CLOUD_UPLOAD_ENABLED=true
+AWS_BACKUP_BUCKET=strellerminds-backups
+AWS_BACKUP_REPLICA_BUCKET=strellerminds-backups-replica
+AWS_BACKUP_REPLICA_REGION=us-west-2
+BACKUP_CROSS_REGION_REPLICATION=true
+
+# Backup Retention Policies
+BACKUP_DAILY_RETENTION_DAYS=30
+BACKUP_WEEKLY_RETENTION_WEEKS=12
+BACKUP_MONTHLY_RETENTION_MONTHS=12
+BACKUP_YEARLY_RETENTION_YEARS=7
+
+# Backup Scheduling
+BACKUP_SCHEDULING_ENABLED=true
+
+# Recovery Testing
+BACKUP_RECOVERY_TEST_ENABLED=true
+BACKUP_RECOVERY_TEST_DATABASE=strellerminds_recovery_test
+
+# Backup Alerts
+BACKUP_ALERT_ON_SUCCESS=false
+BACKUP_ALERT_ON_FAILURE=true
+BACKUP_ALERT_ON_RECOVERY_TEST=true
+BACKUP_STORAGE_WARNING_THRESHOLD_GB=500
+
 # Logging Configuration
 LOG_LEVEL=info
 LOG_FORMAT=json
@@ -118,12 +176,6 @@ VIDEO_PROCESSING_TEMP_DIR=./temp/video-processing
 FFMPEG_PATH=/usr/bin/ffmpeg
 FFPROBE_PATH=/usr/bin/ffprobe
 
-AWS_ACCESS_KEY_ID=test
-AWS_SECRET_ACCESS_KEY=test
-AWS_REGION=us-east-1
-S3_ENDPOINT=http://localhost:4566
-S3_BUCKET_NAME=media-bucket
-
 # Video Security
 VIDEO_TOKEN_EXPIRY=3600
 VIDEO_DRM_ENABLED=false
@@ -159,4 +211,33 @@ OTEL_RESOURCE_ATTRIBUTES=service.version=1.0
 OTEL_EXPORTER=jaeger
 OTEL_COLLECTOR_URL=http://localhost:14268/api/traces
 
+ELASTICSEARCH_NODE=http://localhost:9200
+ELASTICSEARCH_USERNAME=elastic
+ELASTICSEARCH_PASSWORD=your_elasticsearch_password_here
+
+# Webhook Security Configuration
+# Stripe Webhook Configuration
+STRIPE_WEBHOOK_SECRET=whsec_your_stripe_webhook_secret_here
+
+# PayPal Webhook Configuration
+PAYPAL_WEBHOOK_SECRET=your_paypal_webhook_secret_here
+
+# Zoom Webhook Configuration
+ZOOM_WEBHOOK_SECRET=your_zoom_webhook_secret_here
+
+# Custom Webhook Configuration
+CUSTOM_WEBHOOK_SECRET=your_custom_webhook_secret_here
+
+# Webhook Rate Limiting (per minute)
+WEBHOOK_RATE_LIMIT_STRIPE=100
+WEBHOOK_RATE_LIMIT_PAYPAL=50
+WEBHOOK_RATE_LIMIT_ZOOM=200
+WEBHOOK_RATE_LIMIT_CUSTOM=100
+
+# Webhook Replay Protection (window in milliseconds)
+WEBHOOK_REPLAY_WINDOW=300000
 
+# Webhook Logging Configuration
+WEBHOOK_LOG_RETENTION_DAYS=30
+WEBHOOK_LOG_INCLUDE_PAYLOAD=false
+WEBHOOK_LOG_INCLUDE_HEADERS=true

.env.locale

@@ -0,0 +1,27 @@
+# Server Configuration
+PORT=3000
+
+DATABASE_HOST=localhost
+DATABASE_PORT=5432
+DATABASE_USER=your_database_user_here
+DATABASE_PASSWORD=your_database_password_here
+DATABASE_NAME=your_database_name_here
+
+# Authentication
+JWT_SECRET=your_jwt_secret_here
+
+#Cloudinary Credentials 
+CLOUDINARY_CLOUD_NAME=your_cloud_name_here
+CLOUDINARY_API_KEY=your_cloudinary_api_key_here
+CLOUDINARY_API_SECRET=your_cloudinary_api_secret_here
+STELLAR_SECRET_KEY=your_stellar_secret_key_here
+
+NODE_ENV=development
+EMAIL_ENABLED=false
+EMAIL_TRACKING_ENABLED=true
+EMAIL_TRACKING_SECRET=<minimum-32-character-secret>
+EMAIL_TRACKING_BASE_URL=http://localhost:3000
+
+# Redis Configuration
+REDIS_HOST=localhost
+REDIS_PORT=6379