feat: v2 rewrite — hexagonal arch, ActivityPub federation, NATS, deployment-ready (#1)

.env.example

@@ -1,3 +1,28 @@
-POSTGRES_USER=thoughts_user
-POSTGRES_PASSWORD=postgres
-POSTGRES_DB=thoughts_db
+# Database (PostgreSQL required)
+DATABASE_URL=postgres://postgres:password@localhost:5432/thoughts
+
+# Authentication
+JWT_SECRET=change-me
+
+# Public base URL — used for ActivityPub actor URLs and canonical links
+BASE_URL=http://localhost:3000
+
+# Optional
+HOST=0.0.0.0
+PORT=3000
+
+# CORS — comma-separated allowed origins, or * for permissive (default: *)
+CORS_ORIGINS=*
+# CORS_ORIGINS=https://your-nextjs-app.example.com
+
+# Rate limiting — max requests per minute per IP (disabled by default)
+# RATE_LIMIT=60
+ALLOW_REGISTRATION=true   # set to false to disable new sign-ups
+RUST_ENV=development      # set to "production" to disable AP debug mode
+
+# NATS event bus (optional — federation and notifications still work without it,
+# but events will not be delivered to the worker)
+# NATS_URL=nats://localhost:4222
+
+# Logging
+RUST_LOG=info