\n\n## 📚 Table of Contents\n\n- [Description](#-description)\n- [Features](#-features)\n- [Installation](#-installation)\n- [Migrating to 4.0](#migrating-to-40)\n- [Usage](#-usage)\n- [Migration System](#-migration-system)\n- [API Documentation](#-api-documentation)\n- [Database Schema](#-database-schema)\n- [Advanced Configuration](#-advanced-configuration)\n- [Roadmap](#-roadmap)\n- [FAQ](#-faq)\n- [License](#-license)\n\n## 📖 Description\n\nNestJS CRUD Config is a powerful configuration management module that revolutionizes how NestJS applications handle configuration data. Unlike traditional environment variable approaches, this library stores configuration in a database with full CRUD operations, making it perfect for dynamic configuration management across multiple environments and services.\n\nThe module provides hierarchical organization through sections and data entries, supports optional AES-256-GCM encryption for sensitive values, and includes automatic REST API endpoints for configuration management. Built with TypeScript-first design and leveraging the NestJS CRUD Automator for automatic API generation, it features dynamic entity creation at runtime, named transaction ownership, and intelligent caching.\n\nWhether you're managing API keys across different environments, storing feature flags, or maintaining application settings that need to change without redeployment, this module provides a robust, secure, and scalable solution for microservice architectures, multi-tenant applications, and any system requiring centralized, database-backed configuration management with real-time updates.\n\n## 🚀 Features\n\n- **🗄️ Database-backed configuration storage** - Store configuration in any TypeORM-supported database for persistence and scalability\n- **🏗️ Dynamic entity creation** - Entities are created at runtime with customizable table names, field lengths, and constraints\n- **📊 Hierarchical organization** - Organize configuration using sections and data entries for better structure and management\n- **🔐 AES-256-GCM encryption support** - Protect sensitive configuration values with built-in encryption using industry-standard algorithms\n- **🌍 Multi-environment support** - Manage configurations across development, staging, and production environments seamlessly\n- **⚡ Full CRUD operations** - Complete Create, Read, Update, Delete operations with automatic REST API endpoints\n- **📚 Automatic Swagger documentation** - Generated OpenAPI documentation for all configuration endpoints\n- **🎯 TypeScript-first design** - Full type safety with comprehensive interfaces and type definitions\n- **🚀 NestJS CRUD Automator integration** - Leverages advanced CRUD automation for controllers and services\n- **💾 Intelligent caching** - Built-in caching support with configurable TTL and cache size limits\n- **🔄 Named transaction ownership** - Each Automator-owned unit of work uses one exact TypeORM manager, including joined migration writes\n- **🎛️ Highly customizable** - Configure table prefixes, field lengths, validation rules, and entity relationships\n- **🚦 Flexible controller configuration** - Customize API paths, disable endpoints, or run in headless mode\n- **🔧 Advanced CRUD customization** - Full control over routes, swagger documentation, and controller behavior\n- **📦 Modular architecture** - Enable/disable features as needed for your use case\n- **🚀 Production-ready migration system** - Initialize and manage configuration state during application startup\n\n## 🛠 Installation\n\nThese docs describe the CrudConfig 4 contract. Use the 4.x-only range so the package manager cannot resolve an incompatible 3.x release:\n\n```bash\n# npm\nnpm install @elsikora/nestjs-crud-config@^4.0.0-0\n\n# yarn\nyarn add @elsikora/nestjs-crud-config@^4.0.0-0\n\n# pnpm\npnpm add @elsikora/nestjs-crud-config@^4.0.0-0\n```\n\n### Prerequisites\n\nInstall the required peer dependencies:\n\n```bash\nnpm install @elsikora/nestjs-crud-automator@^4.0.0-0 @nestjs/common@^11.1.24 @nestjs/core@^11.1.24 @nestjs/typeorm@^11.0.0 typeorm@^0.3.20\nnpm install @nestjs/passport@^11.0.5 @nestjs/platform-fastify@11.1.24 @nestjs/swagger@11.4.2 @nestjs/throttler@^6.5.0 class-transformer@^0.5.1 class-validator@^0.15.1 fastify@^5.8.5 lodash@^4.18.1\n```\n\n### Automator 4 compatibility\n\nCrudConfig 4 requires `@elsikora/nestjs-crud-automator >=4.0.0-0 <5.0.0`. Automator 3 is not supported.\n\nGenerated route overrides continue to use Automator generation config:\n\n```typescript\nDELETE: {\n generation: {\n isEnabled: false,\n },\n},\n```\n\nConfigData `CREATE` and `UPDATE` use Automator nested request relation loading. The built-in section relation expects request bodies such as `{ \"section\": { \"id\": \"section-uuid\" } }`.\n\nCrudConfig creates each generated service through `createDynamicService()` and `@ApiService({ entity })`, so its inherited same-entity CRUD methods satisfy the Automator 4 generated-route capability boundary. Applications do not need a wrapper or compatibility layer.\n\nThe tested Swagger baseline remains exact `11.4.2`. See [Migrating to 4.0](#migrating-to-40) for the compatibility change.\n\n### Migrating to 4.0\n\nCrudConfig 4 removes Automator 3 compatibility. The CrudConfig runtime contract is otherwise unchanged:\n\n- generated routes keep the same paths, payloads, and `generation.isEnabled` options;\n- ConfigData relation input remains `{ \"section\": { \"id\": \"section-uuid\" } }`;\n- transaction ownership and `eventManager` join behavior remain unchanged;\n- the database schema, duplicate mapping, and EventEmitter-free runtime remain unchanged;\n- no consumer wrapper or legacy compatibility wiring is introduced.\n\nSee the complete [4.0 migration guide](docs/guides/migrating-to-4-0/page.mdx). The [3.0 migration guide](docs/guides/migrating-to-3-0/page.mdx) remains available for applications upgrading from CrudConfig 2.\n\n### Database Support\n\nThis package works with any database supported by TypeORM:\n\n- PostgreSQL\n- MySQL/MariaDB\n- SQLite\n- Microsoft SQL Server\n- Oracle\n- MongoDB\n- CockroachDB\n\n## 💡 Usage\n\n### Basic Setup\n\n```typescript\n// app.module.ts\nimport { Module } from \"@nestjs/common\";\nimport { TypeOrmModule } from \"@nestjs/typeorm\";\nimport { CrudConfigModule, TOKEN_CONSTANT } from \"@elsikora/nestjs-crud-config\";\n\n@Module({\n imports: [\n // First register CrudConfigModule to create dynamic entities\n CrudConfigModule.register({\n environment: \"development\",\n shouldAutoCreateSections: true,\n\n // Cache configuration\n cacheOptions: {\n isEnabled: true,\n maxCacheItems: 1000,\n maxCacheTTL: 3600000, // 1 hour in milliseconds\n },\n\n // Encryption configuration\n encryptionOptions: {\n isEnabled: true,\n encryptionKey: process.env.CONFIG_ENCRYPTION_KEY, // 32+ character key\n },\n\n // Controller configuration (optional)\n controllersOptions: {\n section: {\n isEnabled: true,\n properties: {\n path: \"api/config/sections\",\n },\n },\n data: {\n isEnabled: true,\n properties: {\n path: \"api/config/data\",\n },\n },\n },\n\n // Entity customization\n entityOptions: {\n tablePrefix: \"app_\",\n timestampColumnType: \"timestamptz\", // PostgreSQL; defaults to \"timestamp\"\n configSection: {\n tableName: \"config_sections\",\n maxNameLength: 128,\n maxDescriptionLength: 512,\n },\n configData: {\n tableName: \"config_data\",\n maxValueLength: 8192,\n maxEnvironmentLength: 64,\n maxNameLength: 128,\n maxDescriptionLength: 512,\n },\n },\n }),\n\n // Then register TypeORM with dynamic entities using registerAsync\n TypeOrmModule.forRootAsync({\n imports: [CrudConfigModule],\n inject: [TOKEN_CONSTANT.CONFIG_SECTION_ENTITY, TOKEN_CONSTANT.CONFIG_DATA_ENTITY],\n useFactory: async (sectionEntity, dataEntity) => ({\n type: \"postgres\",\n host: \"localhost\",\n port: 5432,\n username: \"postgres\",\n password: \"postgres\",\n database: \"config_db\",\n entities: [\n // Your other entities\n // UserEntity, ProductEntity, etc.\n\n // Dynamic entities from CrudConfigModule\n sectionEntity,\n dataEntity,\n ],\n synchronize: true,\n }),\n }),\n ],\n})\nexport class AppModule {}\n```\n\n### Using the Configuration Service\n\n```typescript\n// config.service.ts\nimport { Injectable } from \"@nestjs/common\";\nimport { CrudConfigService } from \"@elsikora/nestjs-crud-config\";\n\n@Injectable()\nexport class MyConfigService {\n constructor(private readonly configService: CrudConfigService) {}\n\n async setupApplicationConfig() {\n // Set a configuration value\n await this.configService.set({\n section: \"api-settings\",\n name: \"API_KEY\",\n value: \"my-secret-api-key\",\n description: \"Production API key\",\n environment: \"production\",\n });\n\n // Retrieve configuration by section and name\n const apiConfig = await this.configService.get({\n section: \"api-settings\",\n name: \"API_KEY\",\n environment: \"production\",\n shouldLoadSectionInfo: true,\n useCache: true,\n });\n\n console.log(\"API Configuration:\", apiConfig);\n // apiConfig.value will be automatically decrypted if it was encrypted\n\n return apiConfig;\n }\n\n async getConfigurationList() {\n // Get all configurations in a section\n const configs = await this.configService.getList({\n section: \"api-settings\",\n environment: \"production\",\n useCache: true,\n });\n\n return configs;\n }\n\n async deleteConfiguration() {\n // Delete a configuration\n await this.configService.delete({\n section: \"api-settings\",\n name: \"API_KEY\",\n environment: \"production\",\n });\n }\n}\n```\n\n### Async Module Registration\n\nWhen using `registerAsync()`, static options like controllers and entity configuration must be provided via the `staticOptions` property, as NestJS does not support async controller registration:\n\n```typescript\n// app.module.ts\nimport { Module } from \"@nestjs/common\";\nimport { ConfigModule, ConfigService } from \"@nestjs/config\";\nimport { CrudConfigModule } from \"@elsikora/nestjs-crud-config\";\n\n@Module({\n imports: [\n ConfigModule.forRoot(),\n CrudConfigModule.registerAsync({\n imports: [ConfigModule],\n inject: [ConfigService],\n // Dynamic options - resolved asynchronously\n useFactory: async (configService: ConfigService) => ({\n environment: configService.get(\"NODE_ENV\", \"development\"),\n encryptionOptions: {\n isEnabled: true,\n encryptionKey: configService.get(\"ENCRYPTION_KEY\"),\n },\n cacheOptions: {\n isEnabled: true,\n maxCacheItems: 1000,\n maxCacheTTL: 3600000,\n },\n }),\n // Static options - must be known at module registration time\n staticOptions: {\n controllersOptions: {\n section: {\n isEnabled: true,\n properties: {\n path: \"api/config/sections\",\n },\n },\n data: {\n isEnabled: true,\n properties: {\n path: \"api/config/data\",\n },\n },\n },\n entityOptions: {\n tablePrefix: \"app_\",\n timestampColumnType: \"timestamptz\", // Must be static for dynamic entities\n configSection: {\n tableName: \"config_sections\",\n maxNameLength: 128,\n },\n configData: {\n tableName: \"config_data\",\n maxValueLength: 8192,\n },\n },\n migrationEntityOptions: {\n tableName: \"config_migrations\",\n },\n },\n }),\n ],\n})\nexport class AppModule {}\n```\n\n**Important:** The `staticOptions` property contains configuration that must be known at module compilation time:\n\n- `controllersOptions` - REST API controller configuration\n- `entityOptions` - Database entity customization (table names, field lengths, timestamp type)\n- `migrationEntityOptions` - Migration tracking table configuration\n\n## 🚀 Migration System\n\nThe NestJS CRUD Config module includes a powerful **production-ready migration system** that allows you to initialize and manage configuration state during application startup. This system ensures your application always has the required configuration data across different environments and deployments.\n\n### Key Features\n\n- **🔄 Automatic execution on startup** - Migrations run automatically when the application bootstraps\n- **💾 Named transaction support** - Transaction-enabled migrations run inside one named Automator owner\n- **🌍 Environment-specific configurations** - Create different configurations for different environments\n- **📊 Migration tracking** - Complete audit trail with timestamps and execution status\n- **🔙 Rollback support** - Define rollback procedures for each migration\n- **⚡ Stuck migration cleanup** - Automatic timeout and cleanup of crashed migrations\n- **🎯 Type-safe status tracking** - Uses `EConfigMigrationStatus` enum for reliable status management\n- **🛡️ Race condition protection** - Thread-safe execution preventing concurrent conflicts\n\n### Migration Status Enum\n\nThe migration system uses the `EConfigMigrationStatus` enum to track migration states:\n\n```typescript\nimport { EConfigMigrationStatus } from \"@elsikora/nestjs-crud-config\";\n\n// Available statuses:\nEConfigMigrationStatus.PENDING; // Migration is pending execution\nEConfigMigrationStatus.RUNNING; // Migration is currently running\nEConfigMigrationStatus.COMPLETED; // Migration completed successfully\nEConfigMigrationStatus.FAILED; // Migration failed with error\nEConfigMigrationStatus.STUCK; // Migration is stuck (timeout)\n```\n\n### Basic Migration Configuration\n\nConfigure migrations in your module registration:\n\n```typescript\nimport { CrudConfigModule } from \"@elsikora/nestjs-crud-config\";\nimport { initialAppConfigMigration } from \"./migrations/001-initial-app-config.migration\";\n\n@Module({\n imports: [\n CrudConfigModule.register({\n environment: process.env.NODE_ENV || \"development\",\n\n // Migration configuration\n migrationOptions: {\n isEnabled: true,\n shouldRunOnStartup: true,\n useTransaction: true,\n stuckMigrationTimeoutMinutes: 30,\n tableName: \"config_migrations\", // Optional: custom table name\n\n migrations: [\n initialAppConfigMigration,\n // Add more migrations here\n ],\n },\n\n // Other configuration options...\n }),\n ],\n})\nexport class AppModule {}\n```\n\nWith `useTransaction: true` (the default), execution owns one `crud-config-migrations` transaction and passes its exact `EntityManager` to each migration callback. Pass that manager as `eventManager` to every config operation in the migration. Omitting it from `set()` would attempt to open the separate `crud-config-set` owner, and Automator rejects nested owners.\n\nWith `useTransaction: false`, there is no migration-wide owner and callbacks receive `undefined`. A standalone `set()` still owns its own atomic `crud-config-set` transaction, so several config writes are not one all-or-nothing unit. Rollback execution always uses the named migration owner.\n\n### Creating Migration Files\n\nCreate a migration file with the required structure:\n\n```typescript\n// migrations/001-initial-app-config.migration.ts\nimport type { IConfigMigrationDefinition } from \"@elsikora/nestjs-crud-config\";\nimport type { CrudConfigService } from \"@elsikora/nestjs-crud-config\";\nimport type { EntityManager } from \"typeorm\";\n\nexport const initialAppConfigMigration: IConfigMigrationDefinition = {\n name: \"001_initial_app_config\",\n description: \"Initialize basic application configuration\",\n\n async up(configService: CrudConfigService, entityManager?: EntityManager): Promise {\n // Create application settings\n await configService.set({\n section: \"app-settings\",\n name: \"APP_NAME\",\n value: \"My Application\",\n description: \"Application name\",\n environment: \"default\",\n eventManager: entityManager,\n });\n\n await configService.set({\n section: \"app-settings\",\n name: \"APP_VERSION\",\n value: \"1.0.0\",\n description: \"Application version\",\n environment: \"default\",\n eventManager: entityManager,\n });\n\n // Create API settings\n await configService.set({\n section: \"api-settings\",\n name: \"API_RATE_LIMIT\",\n value: \"100\",\n description: \"API rate limit per minute\",\n environment: \"default\",\n eventManager: entityManager,\n });\n },\n\n async down(configService: CrudConfigService, entityManager?: EntityManager): Promise {\n // Rollback: remove configurations created by this migration\n const configurationsToRemove = [\n { name: \"APP_NAME\", section: \"app-settings\" },\n { name: \"APP_VERSION\", section: \"app-settings\" },\n { name: \"API_RATE_LIMIT\", section: \"api-settings\" },\n ];\n\n for (const config of configurationsToRemove) {\n try {\n await configService.delete({\n section: config.section,\n name: config.name,\n environment: \"default\",\n eventManager: entityManager,\n });\n } catch (error) {\n // Expected if config was never created\n console.warn(`Failed to delete config ${config.section}:${config.name} during rollback`);\n }\n }\n },\n};\n```\n\n### Environment-Specific Migrations\n\nCreate migrations that work with different environments:\n\n```typescript\n// migrations/002-environment-specific-config.migration.ts\nexport const environmentSpecificConfigMigration: IConfigMigrationDefinition = {\n name: \"002_environment_specific_config\",\n description: \"Environment-specific configuration settings\",\n\n async up(configService: CrudConfigService, entityManager?: EntityManager): Promise {\n const environments = [\"development\", \"staging\", \"production\"];\n\n for (const env of environments) {\n // Environment-specific debug settings\n await configService.set({\n section: \"app-settings\",\n name: \"DEBUG_MODE\",\n value: env === \"development\" ? \"true\" : \"false\",\n description: \"Enable debug mode\",\n environment: env,\n eventManager: entityManager,\n });\n\n // Environment-specific API limits\n const rateLimits = {\n development: \"1000\",\n staging: \"500\",\n production: \"100\",\n };\n\n await configService.set({\n section: \"api-settings\",\n name: \"API_RATE_LIMIT\",\n value: rateLimits[env],\n description: \"API rate limit per minute\",\n environment: env,\n eventManager: entityManager,\n });\n }\n },\n\n async down(configService: CrudConfigService, entityManager?: EntityManager): Promise {\n const environments = [\"development\", \"staging\", \"production\"];\n const configurationsToRemove = [\n { name: \"DEBUG_MODE\", section: \"app-settings\" },\n { name: \"API_RATE_LIMIT\", section: \"api-settings\" },\n ];\n\n for (const config of configurationsToRemove) {\n for (const environment of environments) {\n try {\n await configService.delete({\n section: config.section,\n name: config.name,\n environment: environment,\n eventManager: entityManager,\n });\n } catch (error) {\n console.warn(\n `Failed to delete config ${config.section}:${config.name}:${environment} during rollback`,\n );\n }\n }\n }\n },\n};\n```\n\n### Advanced Migration Configuration\n\nConfigure migrations with custom options:\n\n```typescript\nCrudConfigModule.registerAsync({\n imports: [ConfigModule],\n inject: [ConfigService],\n useFactory: async (configService: ConfigService) => ({\n environment: configService.get(\"NODE_ENV\", \"development\"),\n\n migrationOptions: {\n isEnabled: true,\n shouldRunOnStartup: true,\n useTransaction: true,\n stuckMigrationTimeoutMinutes: 60, // Custom timeout\n\n migrations: [\n initialAppConfigMigration,\n environmentSpecificConfigMigration,\n // Add more migrations in order\n ],\n },\n\n // Other dynamic options...\n }),\n // Static options for entities and controllers\n staticOptions: {\n migrationEntityOptions: {\n tableName: \"my_migrations\", // Custom table name must be in staticOptions\n maxNameLength: 256,\n },\n controllersOptions: {\n section: { isEnabled: true },\n data: { isEnabled: true },\n },\n },\n});\n```\n\n### Migration Best Practices\n\n1. **Naming Convention**: Use descriptive names with sequence numbers\n - ✅ `001_initial_app_config`\n - ✅ `002_add_feature_flags`\n - ❌ `migration1`, `config_setup`\n\n2. **Retry safety**: Use `set()` as the upsert for a configuration key\n\n ```typescript\n await configService.set({ eventManager: entityManager, ...properties });\n ```\n\n3. **Error Handling**: Always handle errors gracefully\n\n ```typescript\n try {\n await configService.set({ eventManager: entityManager, ...properties });\n } catch (error) {\n console.error(\"Migration failed:\", error);\n throw error; // Re-throw to mark migration as failed\n }\n ```\n\n4. **Rollback Support**: Always implement the `down` method\n\n ```typescript\n async down(configService: CrudConfigService, entityManager?: EntityManager): Promise {\n // Implement rollback logic\n }\n ```\n\n5. **Environment Awareness**: Use environment-specific configurations\n ```typescript\n const currentEnv = process.env.NODE_ENV || \"development\";\n await configService.set({\n eventManager: entityManager,\n environment: currentEnv,\n // ... other options\n });\n ```\n\n### Migration Monitoring\n\nMonitor migration execution with logging:\n\n```typescript\nimport { EConfigMigrationStatus } from \"@elsikora/nestjs-crud-config\";\n\n@Injectable()\nexport class MigrationMonitorService {\n constructor(private readonly migrationService: ConfigMigrationService) {}\n\n async getMigrationStatus(): Promise {\n const migrations = await this.migrationService.getExecutedMigrations();\n\n const completed = migrations.filter((m) => m.status === EConfigMigrationStatus.COMPLETED);\n const failed = migrations.filter((m) => m.status === EConfigMigrationStatus.FAILED);\n const stuck = migrations.filter((m) => m.status === EConfigMigrationStatus.STUCK);\n\n console.log(\n `Migrations - Completed: ${completed.length}, Failed: ${failed.length}, Stuck: ${stuck.length}`,\n );\n }\n\n async getFailedMigrations(): Promise {\n const migrations = await this.migrationService.getExecutedMigrations();\n return migrations.filter((m) => m.status === EConfigMigrationStatus.FAILED);\n }\n}\n```\n\n### Testing Migrations\n\nTest your migrations in different environments:\n\n```typescript\ndescribe(\"Initial App Config Migration\", () => {\n let configService: CrudConfigService;\n let migration: IConfigMigrationDefinition;\n\n beforeEach(async () => {\n // Setup test environment\n migration = initialAppConfigMigration;\n });\n\n it(\"should create required configurations\", async () => {\n await migration.up(configService);\n\n const appName = await configService.get({\n section: \"app-settings\",\n name: \"APP_NAME\",\n environment: \"default\",\n });\n\n expect(appName.value).toBe(\"My Application\");\n });\n\n it(\"should rollback configurations\", async () => {\n await migration.up(configService);\n await migration.down(configService);\n\n await expect(\n configService.get({\n section: \"app-settings\",\n name: \"APP_NAME\",\n environment: \"default\",\n }),\n ).rejects.toThrow();\n });\n});\n```\n\n## 📚 API Documentation\n\nThe module automatically generates REST API endpoints with customizable paths:\n\n### Configuration Sections (default: `/config/section`)\n\n- `GET /config/section` - List all sections\n- `POST /config/section` - Create a new section\n- `GET /config/section/:id` - Get section by ID\n- `PUT /config/section/:id` - Update section\n- `DELETE /config/section/:id` - Delete section\n\n**Request Body for POST/PUT:**\n\n```json\n{\n \"name\": \"api-settings\",\n \"description\": \"API configuration settings\"\n}\n```\n\n### Configuration Data (default: `/config/data`)\n\n- `GET /config/data` - List all configuration data\n- `POST /config/data` - Create new configuration\n- `GET /config/data/:id` - Get configuration by ID\n- `PUT /config/data/:id` - Update configuration\n- `DELETE /config/data/:id` - Delete configuration\n\n**Request Body for POST/PUT:**\n\n```json\n{\n \"name\": \"API_KEY\",\n \"value\": \"your-secret-key\",\n \"environment\": \"production\",\n \"description\": \"Production API key\",\n \"isEncrypted\": true,\n \"section\": { \"id\": \"section-uuid-here\" }\n}\n```\n\n### Customizing API Endpoints\n\n```typescript\nCrudConfigModule.register({\n controllersOptions: {\n section: {\n properties: {\n path: \"api/v1/settings/sections\",\n name: \"CustomSectionController\",\n swagger: {\n tags: [\"Configuration Sections\"],\n },\n },\n },\n data: {\n properties: {\n path: \"api/v1/settings/data\",\n routes: {\n DELETE: { generation: { isEnabled: false } }, // Disable deletion\n },\n },\n },\n },\n});\n```\n\nAutomator 4 route options use `generation.isEnabled` for route generation. Relation loading uses TypeORM `relationLoadStrategy` values (`\"query\"` or `\"join\"`); the built-in ConfigData section relation uses `\"query\"`.\n\n## 🗄️ Database Schema\n\nThe module creates two main tables with the following default structure:\n\n### Configuration Sections Table (`config_section`)\n\n```sql\nCREATE TABLE config_section (\n id UUID PRIMARY KEY DEFAULT uuid_generate_v4(),\n name VARCHAR(128) NOT NULL UNIQUE,\n description VARCHAR(512),\n created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,\n updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP\n);\n```\n\n### Configuration Data Table (`config_data`)\n\n```sql\nCREATE TABLE config_data (\n id UUID PRIMARY KEY DEFAULT uuid_generate_v4(),\n name VARCHAR(128) NOT NULL,\n value VARCHAR(8192) NOT NULL,\n environment VARCHAR(64) NOT NULL,\n description VARCHAR(512),\n is_encrypted BOOLEAN DEFAULT FALSE,\n section_id UUID NOT NULL REFERENCES config_section(id) ON DELETE CASCADE,\n created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,\n updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(name, environment, section_id)\n);\n```\n\n## 🔧 Advanced Configuration\n\n### Encryption Support\n\nThe module provides built-in AES-256-GCM encryption for sensitive configuration values:\n\n```typescript\n// Enable encryption with bounded derived-key reuse for repeated uncached reads\nCrudConfigModule.register({\n cacheOptions: { isEnabled: false },\n encryptionOptions: {\n isEnabled: true,\n encryptionKey: process.env.CONFIG_ENCRYPTION_KEY, // 32+ character key\n derivedKeyCacheMaxEntries: 64,\n },\n});\n\n// When encryption is enabled, all values are encrypted automatically\nawait configService.set({\n section: \"database\",\n name: \"DB_PASSWORD\",\n value: \"my-secret-password\",\n});\n\n// Retrieve and decrypt automatically\nconst config = await configService.get({\n section: \"database\",\n name: \"DB_PASSWORD\",\n useCache: false,\n});\n\nconsole.log(config.value); // Automatically decrypted value\nconsole.log(config.isEncrypted); // true\n```\n\n`encryptionOptions.derivedKeyCacheMaxEntries` bounds the number of derived keys retained by each module instance using `lru-cache`. Omit it or set it to `0` to disable reuse; a positive safe integer enables it. The same option is available through `registerAsync()`.\n\nThis cache retains derived encryption keys in process memory, not configuration values. With `useCache: false`, each read still fetches the current database value, and every decrypt call authenticates the supplied ciphertext with AES-GCM. Only successful decryption populates or promotes a cache entry. Eviction, module destruction, or successful decryption with a different encryption key clears the affected key buffers. Encrypted storage format and the synchronous encryption API are unchanged.\n\n### Transaction and Duplicate Protection\n\n`CrudConfigService.set()` owns a named Automator transaction when called without `eventManager`. When a migration supplies its owner manager, all generated ConfigSection and ConfigData service operations join that same transaction.\n\nThe package does not require consumer `EventEmitterModule` wiring. ConfigData uniqueness is enforced by the database across `name`, `environment`, and `section`; Automator maps a conflicting generated create or update to `409 CONFIGDATA_DUPLICATE_KEY`. Put application-specific validation or auditing in the application service/lifecycle layer rather than a package before-insert event.\n\n### Headless Mode (Without Controllers)\n\n```typescript\nCrudConfigModule.register({\n controllersOptions: {\n section: { isEnabled: false },\n data: { isEnabled: false },\n },\n});\n```\n\nThis is perfect for:\n\n- Background services that only need programmatic access\n- Microservices that manage config through message queues\n- Applications with custom GraphQL or gRPC interfaces\n\n### Working with Multiple Environments\n\n```typescript\n// multi-env.service.ts\n@Injectable()\nexport class MultiEnvironmentService {\n constructor(private readonly configService: CrudConfigService) {}\n\n async setupEnvironmentConfigs() {\n const environments = [\"development\", \"staging\", \"production\"];\n\n for (const env of environments) {\n await this.configService.set({\n section: \"database\",\n name: \"DATABASE_URL\",\n environment: env,\n value: `postgres://localhost:5432/${env}_db`,\n description: `Database URL for ${env} environment`,\n });\n }\n }\n}\n```\n\n## 🛣 Roadmap\n\n| Task / Feature | Status |\n| --------------------------------------------- | -------------- |\n| Core dynamic entity system | ✅ Done |\n| TypeORM integration with all databases | ✅ Done |\n| Hierarchical configuration (sections/data) | ✅ Done |\n| Full CRUD operations with REST API | ✅ Done |\n| Swagger/OpenAPI documentation | ✅ Done |\n| Multi-environment support | ✅ Done |\n| Named Automator transaction ownership | ✅ Done |\n| Caching system with TTL | ✅ Done |\n| Custom table names and prefixes | ✅ Done |\n| Validation and constraints | ✅ Done |\n| NestJS CRUD Automator integration | ✅ Done |\n| TypeScript interfaces and types | ✅ Done |\n| AES-256-GCM encryption support | ✅ Done |\n| Async module registration | ✅ Done |\n| Auto-section creation | ✅ Done |\n| GraphQL API endpoints | 🚧 In Progress |\n| Configuration versioning and history | 🚧 In Progress |\n| Role-based access control (RBAC) | 🚧 In Progress |\n| Configuration templates and inheritance | 🚧 In Progress |\n| Real-time configuration updates via WebSocket | 🚧 In Progress |\n| Configuration validation schemas | 🚧 In Progress |\n| Bulk import/export functionality | 🚧 In Progress |\n| Configuration diff and merge tools | 🚧 In Progress |\n| Audit logging and change tracking | 🚧 In Progress |\n| Configuration backup and restore | 🚧 In Progress |\n| Integration with external secret managers | 🚧 In Progress |\n\n## ❓ FAQ\n\n### What databases are supported?\n\nThe module supports any database that TypeORM supports, including:\n\n- **PostgreSQL** - Recommended for production\n- **MySQL/MariaDB** - Popular choice for web applications\n- **SQLite** - Perfect for development and testing\n- **Microsoft SQL Server** - Enterprise database support\n- **Oracle** - Enterprise-grade database\n- **MongoDB** - NoSQL document database\n- **CockroachDB** - Distributed SQL database\n\n### How does this compare to environment variables?\n\nWhile environment variables are great for simple configurations, this module provides:\n\n- **Database persistence** - Configurations survive container restarts\n- **Runtime updates** - Change configurations without redeployment\n- **Hierarchical organization** - Group related configurations\n- **Multi-environment support** - Manage dev/staging/prod from one place\n- **Encryption support** - Secure sensitive data\n- **REST API** - Manage configurations programmatically\n- **Audit trails** - Track configuration changes\n\n### Can I migrate from environment variables?\n\nYes! You can easily migrate by programmatically setting configurations during application startup:\n\n```typescript\nasync function migrateFromEnvVars() {\n const configs = [\n { section: \"database\", name: \"DATABASE_URL\", value: process.env.DATABASE_URL },\n { section: \"api\", name: \"API_KEY\", value: process.env.API_KEY },\n // ... more configurations\n ];\n\n for (const config of configs) {\n await configService.set(config);\n }\n}\n```\n\n### How do I handle sensitive configuration data?\n\nThe module provides built-in AES-256-GCM encryption support:\n\n```typescript\nCrudConfigModule.register({\n encryptionOptions: {\n isEnabled: true,\n encryptionKey: process.env.CONFIG_ENCRYPTION_KEY,\n },\n});\n```\n\nSensitive values are automatically encrypted before storage and decrypted when retrieved.\n\n### Can I use this with microservices?\n\nAbsolutely! The module is perfect for microservice architectures:\n\n- **Centralized configuration** - All services can share the same config database\n- **Service-specific sections** - Organize configurations by service\n- **Environment isolation** - Separate dev/staging/prod configurations\n- **Dynamic updates** - Update configurations without service restarts\n\n### How do I customize table names and field sizes?\n\nThe module provides extensive customization options:\n\n```typescript\nCrudConfigModule.register({\n entityOptions: {\n tablePrefix: \"myapp_\",\n timestampColumnType: \"timestamptz\",\n configSection: {\n tableName: \"configuration_sections\",\n maxNameLength: 256,\n maxDescriptionLength: 1024,\n },\n configData: {\n tableName: \"configuration_values\",\n maxValueLength: 16384, // 16KB values\n maxEnvironmentLength: 128,\n maxNameLength: 256,\n maxDescriptionLength: 1024,\n },\n },\n});\n```\n\n`timestampColumnType` applies to all nine temporal columns in the section, data, and migration entities. It defaults to `\"timestamp\"`; choose a TypeORM `ColumnType` supported by your database driver, such as `\"timestamptz\"` for PostgreSQL or `\"datetime\"` for SQL.js/SQLite. Changing it for an existing database still requires the corresponding schema migration.\n\n### What happens if the database is unavailable?\n\nThe module includes caching to handle temporary database outages:\n\n- **In-memory cache** - Recently accessed configurations are cached\n- **Configurable TTL** - Control how long configurations are cached\n- **Graceful degradation** - Falls back to cached values when database is unavailable\n\n### Can I use this without REST API endpoints?\n\nYes! The module supports \"headless mode\" where controllers are disabled:\n\n```typescript\nCrudConfigModule.register({\n controllersOptions: {\n section: { isEnabled: false },\n data: { isEnabled: false },\n },\n});\n```\n\n### Is this production-ready?\n\nYes! The module is built with production use in mind:\n\n- **Type-safe** - Full TypeScript support prevents runtime errors\n- **Battle-tested** - Built on proven technologies (NestJS, TypeORM)\n- **Scalable** - Works with enterprise databases\n- **Secure** - Built-in encryption and validation\n- **Observable** - Comprehensive logging and monitoring hooks\n\n## 🔒 License\n\nThis project is licensed under **MIT License**\n\nCopyright (c) 2025 ElsiKora\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n","readmeFilename":"README.md"}
![\"project-logo\"](\"https://6jft62zmy9nx2oea.public.blob.vercel-storage.com/nestjs-crud-config-dCbe8myqKpk3fxrTwBFBVCkKaz399M.png\")
\n![\"ElsiKora\"](\"https://img.shields.io/badge/MADE%20BY%20ElsiKora-333333.svg?style=for-the-badge\"){kind=icon}
\n ![\"TypeScript\"](\"https://img.shields.io/badge/TypeScript-3178C6.svg?style=for-the-badge&logo=typescript&logoColor=white\"){kind=icon}
![\"NestJS\"](\"https://img.shields.io/badge/NestJS-E0234E.svg?style=for-the-badge&logo=nestjs&logoColor=white\"){kind=icon}
![\"Node.js\"](\"https://img.shields.io/badge/Node.js-339933.svg?style=for-the-badge&logo=node.js&logoColor=white\"){kind=icon}
![\"PostgreSQL\"](\"https://img.shields.io/badge/PostgreSQL-4169E1.svg?style=for-the-badge&logo=postgresql&logoColor=white\"){kind=icon}
![\"MySQL\"](\"https://img.shields.io/badge/MySQL-4479A1.svg?style=for-the-badge&logo=mysql&logoColor=white\"){kind=icon}
![\"SQLite\"](\"https://img.shields.io/badge/SQLite-003B57.svg?style=for-the-badge&logo=sqlite&logoColor=white\"){kind=icon}
![\"MongoDB\"](\"https://img.shields.io/badge/MongoDB-47A248.svg?style=for-the-badge&logo=mongodb&logoColor=white\"){kind=icon}
![\"Swagger\"](\"https://img.shields.io/badge/Swagger-85EA2D.svg?style=for-the-badge&logo=swagger&logoColor=black\"){kind=icon}
\n