Spilum.Net/mtf-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use config instead of relying on process.env in server.js

Browse Source
This commit is contained in:
Apher 2026-06-28 22:54:03 +00:00
parent b05e60fbcc
commit c646fefec1
2 changed files with 15 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/config/index.js Normal file
View File

@ -0,0 +1,5 @@
module.exports = {
force_db_sync: process.env.FORCE_DB_SYNC,
node_env: process.env.NODE_ENV,
port: process.env.PORT
};

19
src/server.js
View File

@ -1,5 +1,3 @@
require("dotenv").config();
const express = require("express");
const cors = require("cors");
const helmet = require("helmet");
@ -10,6 +8,9 @@ const db = models.db;
const {sequelize, Sequelize} = db;
const Role = db.role;
const authConfig = require("./config/auth.config");
const config = require("./config");
const createApp = () => {
const app = express();
@ -18,22 +19,22 @@ const createApp = () => {
// CORS restrict in production (set ALLOWED_ORIGINS env to comma-separated list)
const corsOptions = {
origin: process.env.NODE_ENV === "production"
? (process.env.ALLOWED_ORIGINS || "").split(",").map(s => s.trim())
origin: config.NODE_ENV === "production"
? (config.ALLOWED_ORIGINS || "").split(",").map(s => s.trim())
: true,
optionsSuccessStatus: 200
};
app.use(cors(corsOptions));
// Logging verbose in dev
app.use(morgan(process.env.NODE_ENV === "production" ? "combined" : "dev"));
app.use(morgan(config.NODE_ENV === "production" ? "combined" : "dev"));
// Body parsing with size limits
app.use(express.json({limit: "10kb"}));
app.use(express.urlencoded({extended: false, limit: "10kb"}));
// Apply rate limiting in production
if (process.env.NODE_ENV === "production") {
if (config.NODE_ENV === "production") {
app.use(rateLimit({
windowMs: 15 * 60 * 1000, // 15 minutes
max: 100, // limit per IP
@ -74,12 +75,12 @@ const initRoles = async () => {
const start = async () => {
try {
// Validate important env vars
if (!process.env.JWT_SECRET) {
if (!authConfig.secret) {
console.warn("JWT_SECRET not set. Ensure secure secret in production.");
}
// Sync DB (not forced in production)
const doForce = process.env.FORCE_DB_SYNC === "true" && process.env.NODE_ENV !== "production";
const doForce = config.FORCE_DB_SYNC === "true" && config.NODE_ENV !== "production";
await sequelize.authenticate();
await sequelize.sync({force: doForce});
if (doForce) console.info("Database dropped and resynced (force=true).");
@ -89,7 +90,7 @@ const start = async () => {
const app = createApp();
// Set port and listen
const PORT = parseInt(process.env.PORT, 10) || 5000;
const PORT = parseInt(config.PORT, 10) || 5000;
const server = app.listen(PORT, () => {
console.log(`Server listening on port ${PORT}`);
});