nodebestpractices/sections/security/secureserver.md

Using HTTPS to encrypt the client-server connection

One Paragraph Explainer

Using services such as Let'sEncrypt, a certificate authority which provides free SSL/TLS certificates, can help encrypt the communication of your applications. Node.js frameworks like Express (based on the core https module) support SSL/TLS, which can be implemented in a few lines of code.

You can also configure SSL/TLS on a reverse proxy, such as NGINX or HAProxy.

Code Example – Enabling SSL/TLS using the Express framework

const express = require('express');
const https = require('https');
const app = express();
const options = {
    // The path should be changed accordingly to your setup
    cert: fs.readFileSync('./sslcert/fullchain.pem'),
    key: fs.readFileSync('./sslcert/privkey.pem')
};
https.createServer(options, app).listen(443);