Debian系统Node.js安全设置指南

?Debian?????Node.js????????????????????????????,??????Node.js???????????

??Node.js

1. ???????:

sudo apt-get update

2. ??Node.js:

sudo apt-get install nodejs

3. ????:

node -v
npm -v

????

1. ??HTTPS:

   • ????HTTPS??????????,???????????????????Let's Encrypt????????

2. ????:

   • ??Mongoose????????????????????????????

   const mongoose = require('mongoose');
   const userSchema = new mongoose.Schema({
       username: { type: String, required: true },
       email: { type: String, required: true, unique: true },
       password: { type: String, required: true }
   });
   

3. ????:

   • ??????????,?????bcrypt???????????????

   const bcrypt = require('bcrypt');
   const saltRounds = 10;
   userSchema.pre('save', function(next) {
       if (!this.isModified('password')) return next();
       bcrypt.hash(this.password, saltRounds, (err, hash) => {
           if (err) return next(err);
           this.password = hash;
           next();
       });
   });
   

4. ??????:

   • ????????(DoS)??,????????express-rate-limit??????????????

   const rateLimit = require("express-rate-limit");
   const limiter = rateLimit({
       windowMs: 15 * 60 * 1000, // 15 minutes
       max: 100 // limit each IP to 100 requests per windowMs
   });
   app.use(limiter);
   

5. CORS??:

   • ??CORS????????????????API,????????????????

   const cors = require('cors');
   app.use(cors({
       origin: 'https://yourwebsite.com', // ???????????
       credentials: true, // ????cookies?????
       optionsSuccessStatus: 200 // ???????200???
   }));
   

6. ????:

   • ????????????????????,?????????,????????????????

   app.use((err, req, res, next) => {
       console.error(err.stack); // ?????????
       res.status(500).send('Something went wrong!'); // ???????????
   });
   

7. ????:

   • ??????????????,?????????????????????

8. ??XSS??:

   • ???helmet??????????HTTP???????????(XSS)?

   const helmet = require('helmet');
   app.use(helmet());
   

9. ??SQL??:

   • ??Mongoose?????????,????????????????,???????????????

10. ??CSRF??:

    • ????????????,?????csurf???????????????(CSRF)???

    const csurf = require('csurf');
    app.use(csurf());
    

????

• Node.js????
• Node.js?Debian??????Node.js????????
• ???Express?Mongoose?,??????????????Node.js????? ?????

???????????,????Debian???????????Node.js???