chore(infra): n'expose pas le backend express (#275)

packages/api/src/index.ts

@@ -37,6 +37,7 @@ geoSystemesInit()
 filesInit().then(() => {
   databaseInit().then(() => {
     const app = express()
+    app.disable('x-powered-by')
 
     if (process.env.API_SENTRY_URL) {
       Sentry.init({

packages/api/src/server/upload.ts

@@ -30,6 +30,8 @@ const restUpload = () => {
   server.datastore = new FileStore({ path: tmp, relativeLocation })
 
   const uploadServer = express()
+  uploadServer.disable('x-powered-by')
+
   uploadServer.all('*', server.handle.bind(server))
 
   return uploadServer

packages/api/tests/app.ts

@@ -7,7 +7,7 @@ import cookieParser from 'cookie-parser'
 import { rest } from '../src/server/rest'
 
 const app = express()
-
+app.disable('x-powered-by')
 app.use(cookieParser())
 app.use(authJwt)
 app.use(express.urlencoded({ extended: true }), express.json(), rest)

packages/ui/index.js

@@ -16,6 +16,7 @@ const compression = require('compression')
 const { createProxyMiddleware } = require('http-proxy-middleware')
 
 const app = express()
+app.disable('x-powered-by')
 const port = process.env.UI_PORT
 const apiUrl = process.env.API_URL
 const apiMatomoUrl = process.env.API_MATOMO_URL