feat: Complete NestJS backend scaffold — 22 modules, 39 entities, WebSocket gateway

Full backend rewrite from Rust/Axum to NestJS/TypeScript.
- 22 feature modules (auth, servers, wipes, maps, plugins, players, console,
  chat, team, notifications, settings, schedules, analytics, alerts, status,
  store, webstore, admin, setup, migration, users, licenses)
- 39 TypeORM entities matching PostgreSQL schema (12 migrations)
- Common infrastructure: JWT/RBAC guards, decorators, exception filter
- NATS service with pub/sub/request-reply
- Socket.IO WebSocket gateway with NATS bridge
- Docker: NestJS Dockerfile + updated docker-compose.yml
- Zero compile errors (npx tsc --noEmit clean)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker/Dockerfile.api.nestjs

@@ -0,0 +1,37 @@
+# Multi-stage build for Corrosion NestJS API
+# Stage 1: Build
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source
+COPY . .
+
+# Build TypeScript
+RUN npm run build
+
+# Stage 2: Production
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Copy built output and production dependencies
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./
+
+# Non-root user
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nestjs -u 1001 && \
+    chown -R nestjs:nodejs /app
+USER nestjs
+
+EXPOSE 3000
+
+CMD ["node", "dist/main.js"]

docker/docker-compose.yml

@@ -29,16 +29,20 @@ services:
 
   api:
     build:
-      context: ../backend
-      dockerfile: ../docker/Dockerfile.api
+      context: ../backend-nest
+      dockerfile: ../docker/Dockerfile.api.nestjs
     container_name: corrosion-api
     environment:
       DATABASE_URL: postgres://corrosion:${DB_PASSWORD:-corrosion_dev}@postgres:5432/corrosion
+      DATABASE_MAX_CONNECTIONS: "20"
       NATS_URL: nats://nats:4222
       JWT_SECRET: ${JWT_SECRET}
+      JWT_ACCESS_EXPIRY_SECONDS: "900"
+      JWT_REFRESH_EXPIRY_SECONDS: "604800"
       ENCRYPTION_KEY: ${ENCRYPTION_KEY}
       CLOUDFLARE_API_TOKEN: ${CLOUDFLARE_API_TOKEN}
       CLOUDFLARE_ZONE_ID: ${CLOUDFLARE_ZONE_ID}
+      BASE_DOMAIN: ${BASE_DOMAIN:-corrosionmgmt.com}
       STEAM_API_KEY: ${STEAM_API_KEY}
       SMTP_HOST: ${SMTP_HOST:-localhost}
       SMTP_PORT: ${SMTP_PORT:-587}
@@ -50,7 +54,7 @@ services:
       ADMIN_PASSWORD: ${ADMIN_PASSWORD}
       ADMIN_USERNAME: ${ADMIN_USERNAME:-Commander}
       ADMIN_LICENSE_KEY: ${ADMIN_LICENSE_KEY:-}
-      RUST_LOG: corrosion_api=info,tower_http=info
+      API_PORT: "3000"
     volumes:
       - map_data:/data/maps
       - backup_data:/data/backups