imen_pishghaman/apps/api/src/main.ts

import { env } from "./config/env.js";
import { NestFactory } from "@nestjs/core";
import type { NestExpressApplication } from "@nestjs/platform-express";
import cookieParser from "cookie-parser";
import helmet from "helmet";
import { AppModule } from "./app.module.js";

async function bootstrap() {
  const app = await NestFactory.create<NestExpressApplication>(AppModule);

  // behind nginx: take the client IP from X-Forwarded-For (rate limiting, contact form)
  app.set("trust proxy", env.TRUST_PROXY);
  app.setGlobalPrefix("api");
  app.use(helmet());
  app.use(cookieParser());

  const origins = env.CORS_ORIGINS.split(",")
    .map((o) => o.trim())
    .filter(Boolean);
  if (origins.length) app.enableCors({ origin: origins, credentials: true });

  app.enableShutdownHooks();
  await app.listen(env.PORT);
}

await bootstrap();