Initiële commit: VibeFinance 3-container opzet

Basislijn van de bestaande applicatie (Vite/React frontend, Express
backend, PostgreSQL) zoals die in de index stond, plus dev-, release-
en documentatiescripts.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

backend/src/server.js

@@ -0,0 +1,61 @@
+import express from "express";
+import cors from "cors";
+import helmet from "helmet";
+import rateLimit from "express-rate-limit";
+import cookieParser from "cookie-parser";
+import pino from "pino";
+import pinoHttp from "pino-http";
+import { config } from "./config/index.js";
+import authRouter   from "./routes/auth.js";
+import dataRouter   from "./routes/data.js";
+import usersRouter  from "./routes/users.js";
+import healthRouter from "./routes/health.js";
+import { errorHandler } from "./middleware/errorHandler.js";
+
+export const logger = pino({
+  level: config.NODE_ENV === "production" ? "info" : "debug",
+  ...(config.NODE_ENV !== "production" && {
+    transport: { target: "pino-pretty", options: { colorize: true } },
+  }),
+});
+
+const app = express();
+
+// ── Security ──────────────────────────────────────────────────────────────────
+app.use(helmet());
+app.use(cors({ origin: config.CORS_ORIGIN, credentials: true }));
+app.set("trust proxy", 1);
+
+// ── Rate limiting ─────────────────────────────────────────────────────────────
+app.use("/api/auth", rateLimit({ windowMs: 15 * 60 * 1000, max: 20, standardHeaders: true, legacyHeaders: false }));
+app.use(rateLimit({ windowMs: 15 * 60 * 1000, max: 200, standardHeaders: true, legacyHeaders: false }));
+
+// ── Parsing ───────────────────────────────────────────────────────────────────
+app.use(express.json({ limit: "2mb" }));
+app.use(cookieParser());
+
+// ── Logging ───────────────────────────────────────────────────────────────────
+if (config.NODE_ENV !== "test") {
+  app.use(pinoHttp({ logger }));
+}
+
+// ── Routes ────────────────────────────────────────────────────────────────────
+app.use("/api/health", healthRouter);
+app.use("/api/auth",   authRouter);
+app.use("/api/data",   dataRouter);
+app.use("/api/users",  usersRouter);
+
+// ── 404 voor overige /api/* ───────────────────────────────────────────────────
+app.use("/api/*", (_req, res) => res.status(404).json({ error: "Endpoint niet gevonden." }));
+
+// ── Error handler ─────────────────────────────────────────────────────────────
+app.use(errorHandler);
+
+// ── Start ─────────────────────────────────────────────────────────────────────
+if (config.NODE_ENV !== "test") {
+  app.listen(config.PORT, () => {
+    logger.info(`VibeFinance API gestart op http://localhost:${config.PORT} [${config.NODE_ENV}]`);
+  });
+}
+
+export default app;