- Logging (winston & morgan)
helmet
for security headershelmet-csp
for Content-Security Policies- Session store (
redis
or file-based)
Every feature is opt-in.
Variable | Default |
---|---|
NODE_ENV | |
PORT | 4000 |
FORMATTED_UPLOAD_LIMIT | '20MB' |
COOKIE_SECRET | 'c00k1es3cr3t' |
SESSION_TIMEOUT | 3 * 60 * 1000 |
EXPIRATION_PROMPT_TIMEOUT | 30 * 1000 |
TODO:
- Add a prompt for every feature
- Add a prompt for what to use as Express session store (file vs redis for example)
- Remove inlining of webpack manifest chunk (see this issue)
- Create logger helper repo/package and import+use in Express (winston & morgan)