Function bootstrap

backend/src/main.ts:12–80

()

import { AppModule } from './app.module';

async function bootstrap() {
  await enforceVersionCheck();
  const app = await NestFactory.create(AppModule, {
    logger: ['log', 'error', 'warn'],
  });

  // Enable cookie parsing for session auth
  app.use(cookieParser());

  // Set global prefix for all routes
  app.setGlobalPrefix('api/v1');

  // Enable graceful shutdown hooks
  app.enableShutdownHooks();

  const httpAdapter = app.getHttpAdapter().getInstance();
  if (httpAdapter?.set) {
    httpAdapter.set('etag', false);
  }

  // Enable CORS for frontend
  // Build dynamic origin list for multi-instance dev (instances 0-9)
  const instanceOrigins: string[] = [];
  for (let i = 0; i <= 9; i++) {
    const frontendPort = 5173 + i * 100;
    const backendPort = 3211 + i * 100;
    instanceOrigins.push(`http://localhost:${frontendPort}`);
    instanceOrigins.push(`http://127.0.0.1:${frontendPort}`);
    instanceOrigins.push(`http://localhost:${backendPort}`);
    instanceOrigins.push(`http://127.0.0.1:${backendPort}`);
  }

  app.enableCors({
    origin: [
      'http://localhost',
      'http://localhost:80',
      'http://localhost:8090',
      'https://studio.shipsec.ai',
      ...instanceOrigins,
    ],
    credentials: true,
    methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
    allowedHeaders: [
      'Content-Type',
      'Authorization',
      'Accept',
      'Cache-Control',
      'x-organization-id',
      'X-Real-IP',
      'X-Forwarded-For',
      'X-Forwarded-Proto',
    ],
  });
  const port = Number(process.env.PORT ?? 3211);
  const host = process.env.HOST ?? '0.0.0.0';

  const config = new DocumentBuilder()
    .setTitle('ShipSec Studio API')