feat(backend): setup helmet

luna-backend/src/infrastructure/utils/modules/helmet/modules.helmet.ts

@@ -0,0 +1,11 @@
+import inclusion from 'inclusion';
+
+// START helmet module
+import type Helmet from 'helmet';
+
+type IHelmet = typeof Helmet;
+
+export const getModuleHelmet = (): Promise<IHelmet> =>
+  inclusion('helmet').then((mod) => mod.default);
+
+// END helmet module

luna-backend/src/infrastructure/utils/modules/modules.d.ts

@@ -0,0 +1,5 @@
+declare module 'inclusion' {
+  function inclusion(moduleName: string): Promise<any>;
+
+  export = inclusion;
+}

luna-backend/src/main.ts

@@ -1,8 +1,40 @@
 import { NestFactory } from '@nestjs/core';
+import compression from 'compression';
 import { AppModule } from './application/root/app.module';
+import { EnvironmentConfigService } from './infrastructure/environment-config';
+import { getModuleHelmet } from './infrastructure/utils/modules/helmet/modules.helmet';
 
 async function bootstrap() {
+  //
+
   const app = await NestFactory.create(AppModule);
-  await app.listen(3000);
+
+  const environmentConfigService = app.get(EnvironmentConfigService);
+
+  //
+
+  const isProduction = environmentConfigService.getRuntimeIsProduction();
+
+  //
+
+  const helmet = await getModuleHelmet();
+
+  app.use(
+    helmet({
+      contentSecurityPolicy: isProduction ? undefined : false,
+      crossOriginEmbedderPolicy: false,
+    }),
+  );
+
+  //
+
+  app.use(compression());
+
+  //
+
+  const port = environmentConfigService.getRuntimePort();
+
+  await app.listen(port);
 }
+
 bootstrap();