build(server): set development TLS

Author: coopbri

package.json

@@ -6,7 +6,7 @@
   "module": "build/server.js",
   "type": "module",
   "scripts": {
-    "dev": "GRAPHILE_ENV=development bun run --watch src/server.ts",
+    "dev": "NODE_ENV=development GRAPHILE_ENV=development bun run --watch src/server.ts",
     "build": "bun build --target node --outdir build src/server.ts",
     "start": "NODE_ENV=production GRAPHILE_ENV=production bun db:migrate && NODE_ENV=production GRAPHILE_ENV=production bun run build/server.js",
     "lint": "biome lint src",
@@ -24,7 +24,9 @@
     "graphile:generate": "NODE_ENV=development GRAPHILE_ENV=development bun run --env-file .env.local src/scripts/generateGraphqlSchema.ts",
     "prepare": "husky"
   },
-  "trustedDependencies": ["@biomejs/biome"],
+  "trustedDependencies": [
+    "@biomejs/biome"
+  ],
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
     "@types/bun": "^1.2.13",

src/server.ts

@@ -9,23 +9,30 @@ import { useGrafast } from "grafast/envelop";
 
 import { schema } from "generated/graphql/schema.executable";
 import appConfig from "lib/config/app.config";
-import { CORS_ALLOWED_ORIGINS, PORT, isProdEnv } from "lib/config/env.config";
+import {
+  CORS_ALLOWED_ORIGINS,
+  PORT,
+  isDevEnv,
+  isProdEnv,
+} from "lib/config/env.config";
 import createGraphqlContext from "lib/graphql/createGraphqlContext";
 import { armorPlugins, useAuth } from "lib/graphql/plugins";
 
 /**
  * Elysia server.
  */
 const app = new Elysia({
-  serve: {
-    // https://elysiajs.com/patterns/configuration#serve-tls
-    // https://bun.sh/guides/http/tls
-    // NB: Elysia (and Bun) trust the well-known CA list curated by Mozilla (https://wiki.mozilla.org/CA/Included_Certificates), but they can be customized here if needed (`tls.ca` option)
-    tls: {
-      certFile: "cert.pem",
-      keyFile: "key.pem",
+  ...(isDevEnv && {
+    serve: {
+      // https://elysiajs.com/patterns/configuration#serve-tls
+      // https://bun.sh/guides/http/tls
+      // NB: Elysia (and Bun) trust the well-known CA list curated by Mozilla (https://wiki.mozilla.org/CA/Included_Certificates), but they can be customized here if needed (`tls.ca` option)
+      tls: {
+        certFile: "cert.pem",
+        keyFile: "key.pem",
+      },
     },
-  },
+  }),
 })
   .use(
     cors({