I Build Enterprise-Grade
Digital Products

services:
  app:
    build: .
    ports: ["3000:3000"]
    environment:
      - JWT_SECRET=*****
      - AES_KEY=*****
      - DB_HOST=postgres
    depends_on: [postgres]

  postgres:
    image: postgres:15-alpine
    volumes:
      - pgdata:/var/lib/postgresql/data

  nginx:
    image: nginx:alpine
    ports: ["443:443"]

const securityStack = [
  helmet(),
  cors({ origin: WHITELIST }),
  rateLimit({
    windowMs: 15 * 60 * 1000,
    max: 100
  }),
  xssSanitize(),
  csrfProtection(),
  hpp()
];

const authGuard = (req, res, next) => {
  const token = req.headers['authorization'];
  const decoded = jwt.verify(token, SECRET);
  req.user = decoded;
  next();
};

$ docker compose up -d --build
[+] Building app...
[+] Running postgres:15-alpine
[+] Running nginx:alpine
✓ All 3 containers started

$ curl -I https://app.webovex.com
HTTP/2 200 OK
X-Frame-Options: DENY
X-Content-Type: nosniff
Strict-Transport-Security: max-age=31536000

✓ Security headers verified
✓ SSL/TLS active — Grade A+