mirror of
https://github.com/Metastem/wikiless
synced 2024-12-06 19:16:58 +01:00
orenom
95 lines
3.0 KiB
JavaScript
95 lines
3.0 KiB
JavaScript
const config = require('../config')
|
|
const compression = require('compression')
|
|
const path = require('path')
|
|
const express = require('express')
|
|
const cookieParser = require('cookie-parser')
|
|
const fs = require('fs')
|
|
const app = express()
|
|
const r = require('redis')
|
|
const bodyParser = require('body-parser')
|
|
|
|
const redis = (() => {
|
|
const redisOptions = {
|
|
url: config.redis_url,
|
|
password: config.redis_password
|
|
}
|
|
|
|
const client = r.createClient(redisOptions)
|
|
client.on('error', (error) => {
|
|
if(error) {
|
|
console.error(`Redis error: ${error}`)
|
|
}
|
|
})
|
|
return client
|
|
})()
|
|
|
|
const utils = require('./utils.js')(redis)
|
|
|
|
let https = null
|
|
if(config.https_enabled) {
|
|
const privateKey = fs.readFileSync(`${config.cert_dir}/privkey.pem`, 'utf8')
|
|
const certificate = fs.readFileSync(`${config.cert_dir}/cert.pem`, 'utf8')
|
|
const ca = fs.readFileSync(`${config.cert_dir}/fullchain.pem`, 'utf8')
|
|
const credentials = {
|
|
key: privateKey,
|
|
cert: certificate,
|
|
ca
|
|
}
|
|
https = require('https').Server(credentials, app)
|
|
global.protocol = 'https://'
|
|
} else {
|
|
global.protocol = 'http://'
|
|
}
|
|
|
|
const http = require('http').Server(app)
|
|
|
|
app.use((req, res, next) => {
|
|
// set CSP rules and other headers to every request
|
|
res.set({
|
|
'Content-Security-Policy': "default-src 'none'; base-uri 'none'; font-src 'self' data:; img-src 'self' data:; object-src 'none'; script-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; media-src 'self'; form-action 'self'; frame-ancestors 'none'; " + (config.https_enabled ? 'upgrade-insecure-requests;' : '') + " block-all-mixed-content;",
|
|
'Referrer-Policy': 'no-referrer',
|
|
...(config.https_enabled ? { 'Strict-Transport-Security': 'max-age=31536000' } : {}),
|
|
'X-Content-Type-Options': 'nosniff',
|
|
'X-DNS-Prefetch-Control': 'off',
|
|
'X-Download-Options': 'noopen',
|
|
'X-Frame-Options': 'DENY',
|
|
'X-Permitted-Cross-Domain-Policies': 'none',
|
|
'X-XSS-Protection': '0'
|
|
})
|
|
next()
|
|
})
|
|
|
|
if(!config.https_enabled && config.redirect_http_to_https) {
|
|
console.error(`Cannot redirect HTTP=>HTTPS while "https_enabled" is false.`)
|
|
}
|
|
|
|
if(config.redirect_http_to_https) {
|
|
app.use((req, res, next) => {
|
|
if(req.secure) {
|
|
next()
|
|
} else {
|
|
res.redirect(`https://${req.headers.host}${req.url}`)
|
|
}
|
|
})
|
|
}
|
|
|
|
app.use(compression())
|
|
app.use(cookieParser())
|
|
app.use(bodyParser.urlencoded({ extended: true, limit: '10mb' }))
|
|
app.use(express.static(path.join(__dirname, '../static')))
|
|
app.use(express.static(path.join(__dirname, '../media')))
|
|
|
|
if(config.trust_proxy) {
|
|
app.set('trust proxy', config.trust_proxy_address)
|
|
}
|
|
|
|
require('./routes')(app, utils)
|
|
|
|
const cacheControl = require('./cache_control.js')
|
|
cacheControl.removeCacheFiles()
|
|
|
|
if(config.https_enabled) {
|
|
https.listen(config.ssl_port, config.http_addr, () => console.log(`Wikiless ${config.domain} running on https://${config.http_addr}:${config.ssl_port}`))
|
|
}
|
|
http.listen(config.nonssl_port, config.http_addr, () => console.log(`Wikiless ${config.domain} running on http://${config.http_addr}:${config.nonssl_port}`))
|