Merge pull request #10 from nbitzz/express-ssl-force

Force SSL through expressjs
mollersuite · Oct 1, 2023 · a4bbbf8 · a4bbbf8
2 parents fb57af0 + 3bf0e74
commit a4bbbf8
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/config.json b/config.json
@@ -24,5 +24,8 @@
         "send": {
             "from": "[email protected]"
         }
-    }
+    },
+
+    "trustProxy": true,
+    "forceSSL": true
 }
diff --git a/src/server/index.ts b/src/server/index.ts
@@ -28,6 +28,15 @@ app.use("/static/js",express.static("out/client"))
 
 app.use(cookieParser())
 
+// check for ssl, if not redirect
+if (config.trustProxy) app.enable("trust proxy")
+if (config.forceSSL) {
+    app.use((req,res,next) => {
+        if (req.protocol == "http") res.redirect(`https://${req.get("host")}${req.originalUrl}`)
+        else next()
+    })
+}
+
 app.get("/server",(req,res) => {
     res.send(JSON.stringify({
         ...config,