server.js

import express from "express";
import dotenv from "dotenv";
import morgan from "morgan";
import fileupload from "express-fileupload"
import cookieParser from "cookie-parser"
import path from "path"
import { DBConnect } from "./config/db.js";
import { errorHandler } from "./middleware/errorHandler.js";
import bootcamps from "./routes/bootcamp.js";
import courses from "./routes/courses.js";
import auth from "./routes/auth.js"
import user from "./routes/user.js"
import reviews from "./routes/reviews.js"
import cors from 'cors'
import mongoSanitize from "express-mongo-sanitize"
import helmet from "helmet"
import xss from "xss-clean"
import rateLimit from 'express-rate-limit'


// Load env vars
dotenv.config({ path: "./config/config.env" });

// Dirname path
const __dirname = path.resolve();

// Database Connection
DBConnect();

const app = express();

// Body parser
app.use(express.json());

// Using cors
app.use(cors())

// Cookie parser
app.use(cookieParser())

// To remove data using these defaults:
app.use(mongoSanitize());

// Set security headers
app.use(helmet())

// Prevent XSS attacks
app.use(xss())

// Rate limiter (50 req per 10 minutes)
const limiter = rateLimit({
  windowMs: 10 * 60 * 1000, // 10 mins
  max: 1000
})

app.use(limiter)

// Check the NODE env
if (process.env.NODE_ENV === "development") {
  app.use(morgan("dev"));
}

// File uploading
app.use(fileupload());

// Set static folder
app.use(express.static(path.join(__dirname, 'public')));

// Mount routes
app.use("/api/v1/bootcamps", bootcamps);
app.use("/api/v1/courses", courses);
app.use("/api/v1/auth", auth);
app.use("/api/v1/users", user);
app.use("/api/v1/reviews", reviews)

// Use Error handler
app.use(errorHandler);

const PORT = process.env.PORT || 8080;

const server = app.listen(PORT, () =>
  console.log(
    `App is running in ${process.env.NODE_ENV} mood on PORT ${PORT}`.yellow.bold
  )
);

// Hanlde Unhandled Promise Rejection Warning
process.on("unhandledRejection", (err, promise) => {
  console.log(`Error: ${err.message}`.red.bold);
  server.close(() => process.exit(1));
});