DEV-1264: better-auth

Author: kaihaase

.env.example

@@ -1,4 +1,4 @@
-# Example configurations via environment variables (sse README.md | Configuration):
+# Example configurations via environment variables (see README.md | Configuration):
 
 # Example configuration via JSON:
 NEST_SERVER_CONFIG='{
@@ -25,3 +25,40 @@ NEST_SERVER_CONFIG='{
 
 # Example configuration via single Nest Server Config environment variables:
 NSC__EMAIL__DEFAULT_SENDER__EMAIL=jon.doe@ethereal.email
+
+# =============================================================================
+# Better-Auth Configuration (optional - for modern authentication)
+# =============================================================================
+
+# Better-Auth secret (minimum 32 characters, required when enabled)
+BETTER_AUTH_SECRET=your-secret-key-that-is-at-least-32-characters-long
+
+# Better-Auth base URL (your application URL)
+BETTER_AUTH_URL=http://localhost:3000
+
+# Two-Factor Authentication
+TWO_FACTOR_ENABLED=false
+TWO_FACTOR_APP_NAME=MyApp
+
+# Passkey/WebAuthn
+PASSKEY_ENABLED=false
+PASSKEY_RP_ID=localhost
+PASSKEY_RP_NAME=MyApp
+
+# Social Login - Google
+SOCIAL_GOOGLE_CLIENT_ID=your-google-client-id
+SOCIAL_GOOGLE_CLIENT_SECRET=your-google-client-secret
+
+# Social Login - GitHub
+SOCIAL_GITHUB_CLIENT_ID=your-github-client-id
+SOCIAL_GITHUB_CLIENT_SECRET=your-github-client-secret
+
+# Social Login - Apple
+SOCIAL_APPLE_CLIENT_ID=your-apple-client-id
+SOCIAL_APPLE_CLIENT_SECRET=your-apple-client-secret
+
+# Rate Limiting for Better-Auth endpoints
+RATE_LIMIT_ENABLED=true
+RATE_LIMIT_MAX=10
+RATE_LIMIT_WINDOW_SECONDS=60
+RATE_LIMIT_MESSAGE="Too many requests, please try again later."