server.js

require("v8-compile-cache");
const express = require("express");
const cors = require("cors");
const cookieParser = require("cookie-parser");
const session = require("express-session");
const compression = require("compression");
let secureEnv = require("secure-env");
global.__basedir = __dirname + "/..";
global.env = secureEnv({ secret: "mySecretPassword" });
const cluster = require("cluster");
const os = require("os");

const helmet = require("helmet");
const rateLimit = require("express-rate-limit");
const db = require(__dirname + "/models");
const fs = require("fs");

const path = __dirname + "/views/";
const app = express();
const Role = db.role;

const csrf = require("csurf");
const csrfProtection = csrf();

app.use(compression()); //Compress all routes

// var whitelist = ["http://0.0.0.0:8081"];
// var corsOptions = {
//   origin: function (origin, callback) {
//     var originIsWhitelisted = whitelist.indexOf(origin) !== -1;
//     callback(null, originIsWhitelisted);
//   },
//   credentials: true,
// };
app.use(cors());

//Limiter
const limiter = rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minutes
  max: 10000, // Limit each IP to 100 requests per `window` (here, per 15 minutes)
  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
  legacyHeaders: false, // Disable the `X-RateLimit-*` headers
});

app.use(limiter);
app.use(express.static(path));
app.use(express.json());
app.use(express.urlencoded({ extended: true }));
app.use(
  session({
    secret: global.env.SESSIONSECRET,
    resave: true,
    saveUninitialized: true,
  })
);
app.use(cookieParser());
app.use(helmet());
app.use(csrfProtection);

if (cluster.isMaster) {
  const numCPUs = os.cpus().length;

  // Fork workers equal to the number of CPUs
  for (let i = 0; i < numCPUs; i++) {
    cluster.fork();
  }

  cluster.on("exit", (worker, code, signal) => {
    console.log(`Worker ${worker.process.pid} died`);
    // If a worker dies, fork a new one to replace it
  });
  app.get("/api/getcsrftoken", csrfProtection, function (req, res) {
    return res.json({ csrfToken: req.csrfToken() });
  });
  require(__dirname + "/routes/tutorial.routes")(app);
  require(__dirname + "/routes/auth.routes")(app);
  require(__dirname + "/routes/user.routes")(app);
  require(__dirname + "/routes/rapor.routes")(app);

  app.get("/api/getGeoJson:val", function (req, res) {
    res.setHeader("Content-Type", "application/json; charset=utf-8");
    val = req.params.val;
    if (val == 0) {
      fs.createReadStream(__dirname + "/tr-cities-utf8.geojson").pipe(res);
    }
    if (val == 1) {
      fs.createReadStream(__dirname + "/tr_ilce.geojson").pipe(res);
    }
    if (val == 2) {
      fs.createReadStream(__dirname + "/gem_active_faults.geojson").pipe(res);
    }
    if (val == 25) {
      fs.createReadStream(__dirname + "/pafta25000.geojson").pipe(res);
    }

    if (val == 100) {
      fs.createReadStream(__dirname + "/pafta100000.geojson").pipe(res);
    }
    if (val == 500) {
      fs.createReadStream(__dirname + "/pafta500000.geojson").pipe(res);
    }
  });

  db.sequelize.sync();
  // set port, listen for requests
  const PORT = global.env.PORT || 8080;
  app.listen(PORT, () => {
    console.log(`Server is running on port ${PORT}.`);
  });
} else {
  // db.sequelize.sync({force: true}).then(() => {
  //   console.log('Drop and Resync Database with { force: true }');
  //   initial();
  // });

  app.get("/", function (req, res) {
    res.sendFile(path + "index.html");
  });

  function initial() {
    Role.create({
      id: 1,
      name: "user",
    });

    Role.create({
      id: 2,
      name: "moderator",
    });

    Role.create({
      id: 3,
      name: "admin",
    });
    Role.create({
      id: 4,
      name: "guest",
    });
  }
}