11import { is , path , pathSatisfies } from 'ramda'
2- import express from 'express'
3- import helmet from 'helmet'
42import http from 'http'
53import process from 'process'
64import { WebSocketServer } from 'ws'
75
86import { getMasterDbClient , getReadReplicaDbClient } from '../database/client'
97import { AppWorker } from '../app/worker'
108import { createSettings } from '../factories/settings-factory'
9+ import { createWebApp } from './web-app-factory'
1110import { EventRepository } from '../repositories/event-repository'
12- import { rateLimiterMiddleware } from '../handlers/request-handlers/rate-limiter-middleware'
13- import router from '../routes'
1411import { UserRepository } from '../repositories/user-repository'
1512import { webSocketAdapterFactory } from './websocket-adapter-factory'
1613import { WebSocketServerAdapter } from '../adapters/web-socket-server-adapter'
@@ -23,27 +20,7 @@ export const workerFactory = (): AppWorker => {
2320
2421 const settings = createSettings ( )
2522
26- const app = express ( )
27- app
28- . disable ( 'x-powered-by' )
29- . use ( rateLimiterMiddleware )
30- . use ( helmet . contentSecurityPolicy ( {
31- directives : {
32- /**
33- * TODO: Remove 'unsafe-inline'
34- */
35- 'img-src' : [ "'self'" , 'https://cdn.zebedee.io/an/nostr/' ] ,
36- 'connect-src' : [ settings . info . relay_url as string ] ,
37- 'default-src' : [ '"self"' ] ,
38- 'script-src-attr' : [ "'unsafe-inline'" ] ,
39- 'script-src' : [ "'self'" , "'unsafe-inline'" , 'https://cdn.jsdelivr.net/npm/' , 'https://unpkg.com/' , 'https://cdnjs.cloudflare.com/ajax/libs/' ] ,
40- 'style-src' : [ "'self'" , 'https://cdn.jsdelivr.net/npm/' ] ,
41- 'font-src' : [ "'self'" , 'https://cdn.jsdelivr.net/npm/' ] ,
42- } ,
43- } ) )
44- . use ( '/favicon.ico' , express . static ( './resources/favicon.ico' ) )
45- . use ( '/css' , express . static ( './resources/css' ) )
46- . use ( router )
23+ const app = createWebApp ( )
4724
4825 // deepcode ignore HttpToHttps: we use proxies
4926 const server = http . createServer ( app )
0 commit comments