feat: 54Bank Core Banking Platform — Full Production Hardening (P0-P2)

.dockerignore

@@ -0,0 +1,14 @@
+node_modules
+.git
+.github
+*.md
+*.log
+.env
+.env.*
+dist
+coverage
+.vscode
+.idea
+tmp
+*.tar.gz
+flutter

.env.example

@@ -0,0 +1,42 @@
+# 54Bank Platform — Environment Configuration
+# Copy to .env and fill in values
+
+# Required
+DATABASE_URL=postgresql://bank54_user:CHANGE_ME@localhost:5432/bank54_db
+JWT_SECRET=CHANGE_ME_generate_with_openssl_rand_hex_64
+NODE_ENV=production
+
+# Authentication
+KEYCLOAK_URL=http://localhost:8080
+KEYCLOAK_CLIENT_SECRET=CHANGE_ME
+KEYCLOAK_REALM=54bank
+
+# Middleware
+REDIS_URL=redis://localhost:6379
+KAFKA_BROKERS=localhost:9092
+TEMPORAL_ADDRESS=localhost:7233
+OPENSEARCH_URL=http://localhost:9200
+MOJALOOP_HUB_URL=http://localhost:4000
+TIGERBEETLE_ADDRESS=localhost:3000
+FLUVIO_ADDR=localhost:9003
+LAKEHOUSE_API_URL=http://localhost:8085
+
+# External Integrations
+NIBSS_API_KEY=CHANGE_ME
+PAYSTACK_SECRET_KEY=CHANGE_ME
+FLUTTERWAVE_SECRET_KEY=CHANGE_ME
+SMS_API_KEY=CHANGE_ME
+
+# Email
+SMTP_HOST=smtp.54bank.ng
+SMTP_PORT=587
+
+# Platform
+PLATFORM_TENANT_SECRET=CHANGE_ME
+VITE_APP_ID=54bank-platform
+OWNER_OPEN_ID=admin
+
+# Feature Flags
+ENABLE_AUTH=true
+ENABLE_AUDIT=true
+ENABLE_RATE_LIMIT=true

.env.production.example

@@ -0,0 +1,79 @@
+# 54Bank UI production environment template
+# These values provide production-shaped IDs and service URLs for packaging and review.
+# Replace every secret-bearing value with environment-specific secrets before any real deployment.
+
+NODE_ENV=production
+PORT=3000
+
+# Frontend runtime defaults
+VITE_APP_TITLE=54Bank Core Platform
+VITE_APP_LOGO=/favicon.ico
+VITE_DEFAULT_OPERATOR_ROLE=operations
+VITE_DEFAULT_OPERATOR_ID=ops.platform
+VITE_DEFAULT_TENANT_ID=54bank-platform-prod
+VITE_PLATFORM_BASE_URL=https://platform.54bank.app
+VITE_PLATFORM_API_BASE=/api/platform
+VITE_ANALYTICS_MODE=archive-first
+
+# Core runtime identity
+TENANT_ID=54bank-platform-prod
+TENANT_SECRET=REPLACE_WITH_STRONG_TENANT_SECRET
+DEFAULT_OPERATOR_ROLE=operations
+DEFAULT_OPERATOR_ID=ops.platform
+UPSTREAM_PLATFORM_URL=https://platform.54bank.app
+PLATFORM_BASE_URL=https://platform.54bank.app
+JWT_SECRET=REPLACE_WITH_STRONG_JWT_SECRET
+DATABASE_URL=postgresql://app_user:REPLACE_WITH_STRONG_DB_PASSWORD@postgres-primary:5432/app_db?sslmode=require
+
+# Platform middleware and service defaults
+BUILT_IN_FORGE_API_URL=https://forge.manus.im
+BUILT_IN_FORGE_API_KEY=REPLACE_WITH_FORGE_API_KEY
+TELLER_SERVICE_URL=https://teller.middleware.54bank.app
+RECONCILIATION_SERVICE_URL=https://reconciliation.middleware.54bank.app
+ERPNEXT_SERVICE_URL=https://erpnext.middleware.54bank.app
+ISLAMIC_BANKING_SERVICE_URL=https://islamic.middleware.54bank.app
+LEDGER_SERVICE_URL=https://ledger.middleware.54bank.app
+PAYMENT_SERVICE_URL=https://payments.middleware.54bank.app
+CUSTOMER_SERVICE_URL=https://customer.middleware.54bank.app
+TENANT_SERVICE_URL=https://tenant.middleware.54bank.app
+TRADE_FINANCE_SERVICE_URL=https://trade.middleware.54bank.app
+DISPUTE_SERVICE_URL=https://dispute.middleware.54bank.app
+INSURANCE_SERVICE_URL=https://insurance.middleware.54bank.app
+
+# Middleware infrastructure defaults
+TIGERBEETLE_ADDRESSES=tigerbeetle:3000
+TIGERBEETLE_CLUSTER_ID=54bankcluster00000000000000000000
+KAFKA_BOOTSTRAP_SERVERS=kafka:9092
+KAFKA_TOPIC_PREFIX=54bank
+DAPR_HTTP_PORT=3500
+DAPR_PLACEMENT_ADDRESS=dapr-placement:50006
+TEMPORAL_ADDRESS=temporal-frontend:7233
+TEMPORAL_NAMESPACE=banking
+KEYCLOAK_ISSUER_URL=https://identity.54bank.app/realms/54bank
+KEYCLOAK_CLIENT_ID=54bank-operations-ui
+KEYCLOAK_CLIENT_SECRET=REPLACE_WITH_KEYCLOAK_CLIENT_SECRET
+PERMIFY_URL=http://permify:3476
+PERMIFY_TENANT_ID=54bank-platform-prod
+REDIS_URL=redis://redis-master:6379/0
+APISIX_ADMIN_URL=http://apisix-admin.default.svc.cluster.local:9180
+APISIX_PUBLIC_URL=https://api.54bank.app/gateway
+MOJALOOP_API_URL=http://mojaloop-switch.default.svc.cluster.local:4000
+MOJALOOP_FSP_ID=54bank-platform-prod
+MOJALOOP_FSP_SECRET=REPLACE_WITH_MOJALOOP_FSP_SECRET
+LAKEHOUSE_API_URL=http://lakehouse-query.default.svc.cluster.local:8000
+LAKEHOUSE_DATASET=54bank_operational_analytics
+FLUVIO_ADDR=fluvio-sc-public:9003
+
+# Runtime safeguards
+REQUEST_TIMEOUT_MS=15000
+UPSTREAM_TIMEOUT_MS=15000
+UPSTREAM_RETRY_COUNT=2
+RATE_LIMIT_WINDOW_MS=60000
+RATE_LIMIT_MAX_WRITES=120
+HEALTH_CACHE_SECONDS=5
+STATIC_ASSET_CACHE_SECONDS=86400
+DB_POOL_MAX=10
+DB_POOL_IDLE_MAX=10
+DB_POOL_IDLE_TIMEOUT_MS=60000
+DB_POOL_QUEUE_LIMIT=100
+DB_POOL_KEEPALIVE_DELAY_MS=10000