aboutsummaryrefslogtreecommitdiffstats
path: root/src/index.ts
blob: 63c803cc8a84635b86be40f0c2f9b9b968410671 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
import cookieParser from 'cookie-parser';
import csurf from 'csurf';
import express, { Request, Response } from 'express';
import rateLimit from 'express-rate-limit';
import helmet from 'helmet';
import path from 'path';
import { env } from 'process';
import api from './routes/api';

const app = express();

/* MIDDLEWARE */

// Hide the software being used (helps security)
app.use(helmet());

// CSRF protection
app.use(cookieParser());
const csrf = csurf({ cookie: true });

// Rate limiting
const rateLimiter = rateLimit({
    windowMs: 1 * 60 * 1000, // 1 minute
    max: 40, // Limit each IP to 40 requests per `window` (here, per 1 minutes)
    standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
    legacyHeaders: false, // Disable the `X-RateLimit-*` headers
});
app.use(rateLimiter);


// The API
app.use('/api/v1/', api);

/* RENDERING */

app.set('view engine', 'ejs'); // Add ejs as view engine
app.set('views', path.join(__dirname, 'views/pages')); // Set views directory (where the ejs lies)
app.use('/public', express.static(path.join(__dirname, 'public'))); // Set static directory (where the static CSS/JS/images lie)

/* ROUTING */

app.get('/', csrf, (req: Request, res: Response) => {
    res.render('index', { csrfToken: req.csrfToken() });
});
app.get('/about', csrf, (req: Request, res: Response) => {
    res.render('about');
});

// Start the server
const port = env.PORT || 2000;
app.listen(port, () => {
    console.log(`Server is listening on port ${port}`);
});