The latest articles on DEV Community by lamaizi hajar (@lamaizi_hajar_b310d8837b4). https://dev.to/lamaizi_hajar_b310d8837b4 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4185611%2F74a1924c-9f5c-49b4-bdb9-77e201f178c3.png https://dev.to/lamaizi_hajar_b310d8837b4 en lamaizi hajar Wed, 14 Oct 2026 23:06:38 +0000 https://dev.to/lamaizi_hajar_b310d8837b4/i-packaged-my-go-to-nodejstypescript-backend-setup-into-a-boilerplate-35em https://dev.to/lamaizi_hajar_b310d8837b4/i-packaged-my-go-to-nodejstypescript-backend-setup-into-a-boilerplate-35em <p>Every time I started a new backend project, I rebuilt the same things: JWT auth, CSRF protection, Docker setup, and, when a client needed it, invoicing. After doing it one time too many, I packaged it all into a boilerplate. Here's what's inside and the choices I made.</p> <h2> The stack </h2> <ul> <li>Node.js + TypeScript + Express</li> <li>Prisma + PostgreSQL</li> <li>Docker Compose (nginx + api + db), ready to deploy</li> <li>Headless: no frontend included, so it works with web, mobile, or nothing at all</li> </ul> <h2> Auth: JWT + CSRF </h2> <p>Authentication uses JWT with CSRF protection, covered by integration tests. Role-based access (USER / ADMIN) is built in, so protected routes like "create a product" are restricted to admins from day one.</p> <h2> A billing module (the part I'm most happy with) </h2> <p>Most boilerplates stop at auth. I added a billing flow:</p> <p><strong>Company settings → Client → Product → Order → Invoice (PDF)</strong></p> <p>Two design decisions worth sharing:</p> <ol> <li> <strong>Price snapshots.</strong> When an order is created, the product's price and VAT rate are copied into the order line. Changing the catalog price later never alters past orders.</li> <li> <strong>Idempotent invoicing.</strong> Calling "generate invoice" twice on the same order returns the same invoice instead of creating a duplicate, so the sequential invoice numbering never gets a gap or a duplicate (a legal requirement in Morocco).</li> </ol> <p>Invoices are generated as PDFs with the legal mentions required in Morocco (ICE, IF, RC, patente, HT/TVA/TTC totals). The structure is generic enough to adapt to other markets.</p> <h2> Bonus modules for Morocco/MENA </h2> <ul> <li> <strong>SMS/OTP phone verification</strong> via EnvoiSMS.ma, tested with real SMS.</li> <li> <strong>PayZone and CMI payment gateway integrations.</strong> Be aware these need your own merchant account to activate, and I have not been able to validate them against live gateways. They are documented, but treat them as a solid starting point rather than a finished integration.</li> </ul> <h2> What's not included </h2> <p>No frontend, no hosting setup beyond Docker, and no merchant accounts for the payment modules.</p> <h2> Get it </h2> <p>It's $29 on Gumroad: <a href="https://hajarlmz.gumroad.com/l/noduk" rel="noopener noreferrer">https://hajarlmz.gumroad.com/l/noduk</a></p> <p>I'd really like feedback: is the feature set right? What would you want added? Let me know in the comments.</p> backend docker node typescript