const express = require("express");

const bodyParser = require("body-parser");

const path = require("path");

const cors = require("cors");

const rateLimit = require("express-rate-limit");

const helmet = require("helmet");

const fs = require("fs");

const https = require("https");

const { Config } = require("./config/options");

const axios = require("axios");

const app = express();

app.set('trust proxy', 1);

const corsOptions = {

origin: [ 'https://api.flatcoding.com', 'https://admin.flatcoding.com', 'https://media.flatcoding.com', 'https://flatcoding.com', 'http://localhost:3001', 'http://localhost:3002' ], // Allow only this origin

methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',

credentials: true, // This is required for cookies to work with CORS

optionsSuccessStatus: 200,

app.use(bodyParser.urlencoded({ limit: '50mb', extended: true }));

helmet.contentSecurityPolicy({

directives: {

defaultSrc: ["'self'"],

connectSrc: ["'self'", 'https://api.flatcoding.com', 'https://admin.flatcoding.com', 'https://media.flatcoding.com', 'https://flatcoding.com'],

styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],

styleSrcElem: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],

fontSrc: ["'self'", 'https://fonts.gstatic.com'],

imgSrc: ["'self'", 'data:'],

mediaSrc: ["*"],

scriptSrc: ["'self'", 'https://www.google.com/recaptcha/', 'https://www.gstatic.com/recaptcha/'],

frameSrc: ["'self'", 'https://www.google.com/recaptcha/', 'https://www.gstatic.com/recaptcha/'],

// You can add other directives as needed

},

})

const { tokenRouter } = require("./apis/secure/token");

const { mediaRouter } = require("./apis/media");

const { userRouters } = require("./apis/users");

const { switcherRouter } = require("./apis/switcher");

const { categoryRouter } = require("./apis/category");

const { settingsRouter } = require("./apis/settings");

const { postRouter } = require("./apis/posts");

const { tutorialRouter } = require("./apis/tutorials");

const { frontendRouter } = require("./apis/front-end");

const { chapterRouter } = require("./apis/chapters");

const { menuRouter } = require("./apis/menus");

const { adCampaignRouter } = require("./apis/campaigns");

const { contactRouter } = require("./apis/contact");

const { commentsRouter } = require("./apis/comments");

const { analyticsRouter } = require("./apis/google-analytics");

const { analyticsRouter2 } = require("./apis/analytics-report");

const { sitemapRouter } = require("./apis/sitemap");

const { redirectsRouter } = require("./apis/redirects");

const { redirectRouter } = require("./apis/redirect");

const { utillRouter } = require("./apis/utils");

const { storiesRouter } = require("./apis/stories");

app.use("/uploads", express.static(path.join(__dirname, "public/uploads")));

app.use("/api/story-img", express.static(path.join(__dirname, "story-img")));

app.use(Config.server.api, mediaRouter);

app.use(Config.server.api, redirectRouter);

app.use(Config.server.api, tokenRouter);

app.use(Config.server.api, userRouters);

app.use(Config.server.api, switcherRouter);

app.use(Config.server.api, categoryRouter);

app.use(Config.server.api, settingsRouter);

app.use(Config.server.api, postRouter);

app.use(Config.server.api, tutorialRouter);

app.use(Config.server.api, frontendRouter);

app.use(Config.server.api, chapterRouter);

app.use(Config.server.api, menuRouter);

app.use(Config.server.api, adCampaignRouter);

app.use(Config.server.api, contactRouter);

app.use(Config.server.api, commentsRouter);

app.use(Config.server.api, analyticsRouter);

app.use(Config.server.api, analyticsRouter2);

app.use(Config.server.api, utillRouter);

app.use(Config.server.api, storiesRouter);

app.use(Config.server.api, sitemapRouter);

app.get(Config.server.api + '/proxy', async (req, res) => {

try {

const url = decodeURIComponent(req.query.url);

const response = await axios.get(url, {

maxRedirects: 0,

validateStatus: status => status >= 200 && status < 400,

});

const { data, status, statusText, headers } = response;

const isRedirect = status >= 300 && status < 400;

res.json({

is_error: false,

data: { status, type: statusText, is_redirect: isRedirect, url },

message: "Fetched Successfully!"

});

} catch (error) {

res.json({

is_error: true,

data: null,

message: "Something went wrong"

});

}

const sslOptions = {

key: fs.readFileSync('/etc/letsencrypt/live/flatcoding.com/privkey.pem'),

cert: fs.readFileSync('/etc/letsencrypt/live/flatcoding.com/cert.pem'),

https.createServer(sslOptions, app).listen(Config.server.port, () => {

console.log(`The server is running on port ${Config.server.port}`);