add helmet and local env"

.env.local.example

@@ -0,0 +1,7 @@
+NODE_ENV=development
+PORT=5000
+ALLOW_ORIGIN="*"
+ALLOW_METHODS="GET,PUT,POST,PATCH,DELETE,HEAD,OPTIONS"
+ALLOW_HEADERS="Content-Type,Cache-Control,Expires"
+JWT_SECRET=SUPERSECRET
+CONNECTION_STRING="mongodb://localhost:27017/express-template"

.gitignore

@@ -1,5 +1,5 @@
 .env
-.env.dev
+.env.local
 dist
 node_modules
 .npm

package.json

@@ -21,6 +21,7 @@
     "cors": "^2.8.5",
     "dotenv": "^16.3.1",
     "express": "^4.18.2",
+    "helmet": "^7.1.0",
     "joi": "^17.11.0",
     "jsonwebtoken": "^9.0.2",
     "mongoose": "^8.0.2",

src/app.ts

@@ -8,6 +8,7 @@ import loggerMiddleware from "./middleware/logger-middleware";
 import getConfig from "./config/get-config";
 import * as swaggerDoc from "../swagger.json";
 import swagger from "swagger-ui-express";
+import helmet from "helmet";
 
 /**
  * The ExpressJS app
@@ -21,6 +22,7 @@ app.enable("trust proxy");
 
 const config = getConfig();
 
+app.use(helmet());
 app.use(
   cors({
     origin: config.ALLOW_ORIGIN?.split(",").map((x) => x.trim()),

src/index.ts

@@ -8,6 +8,7 @@ import { AppError } from "./utils/app-error";
  * Load enviroment variables
  */
 dotenv.config();
+dotenv.config({ path: `.env.local`, override: true });
 
 const config = getConfig();
 const port: number = config.PORT ? parseInt(config.PORT) : 5000;