🐯 Local HTTPS for NestJS app (api) in Nx workspace
Tags: monorepo, nx, security, nestjs
Published: 2020-10-08 16:02:39

Hey, welcome back in this post series where we will see how to setup a **full HTTPS development environment**. 

In this post, we will setup local HTTPS for NestJS app (api) in Nx workspace.

If you don't have generated your certificate with [mkcert](https://mkcert.dev), I recommand you read the first post of this series. → [link](https://dev.to/nightbr/full-https-ssl-development-environment-4dam)

## What is Nx?

![nx](https://dev-to-uploads.s3.amazonaws.com/i/yadzz24jpk1553jjb0bk.png)

**[Nx](https://nx.dev/)** is a set of extensible dev tools for monorepos, which helps you manage your projects at any scale. It provides great integration with major framework such as Angular, React, Nestframework, Express, ionic, ...

💡 **Nx** use the `angular-cli` under the hood!

## Setting up the project workspace

Creating a new empty workspace

```bash
$ npx create-nx-workspace
npx : 179 installé(s) en 7.547s
? Workspace name (e.g., org name)     myorg
? What to create in the new workspace empty             [an empty workspace with a layout tha
t works best for building apps]
? CLI to power the Nx workspace       Nx           [Recommended for all applications (React, 
Node, etc..)]
...
```

*🗒️ If you already have an Nx workspace, you can skip these steps.*

Then, we will install the NestJS schematics:

```bash
npm install -D @nrwl/nest
```

Now, we will generate a new NestJS application called `nest-api` (change the name with your api name).

```bash
nx generate @nrwl/nest:application --name=nest-api
```

Start serving your app with `nx serve nest-api` 🎉

![http](https://dev-to-uploads.s3.amazonaws.com/i/d8iiqj6ja0smurhfaddo.png)

🗒️ Look at the NestJS Nx plugin documentation to see more options → [here](https://nx.dev/latest/angular/plugins/nest/overview)

## Setting up HTTPS

From the first post of this series, I will assume that you have generated your certificate at location `myorg/dev-stack/certs/local-cert.pem` & `myorg/dev-stack/certs/local-key.pem`. Don't hesitate to go back to the first post to use mkcert and generate your certificate.

We will edit the NestJS server to handle HTTPS requests.

Open and edit `myorg/apps/nest-api/src/main.ts`

```tsx
import { Logger } from '@nestjs/common';
import { NestFactory } from '@nestjs/core';
import * as fs from 'fs';
import * as path from 'path';

import { AppModule } from './app/app.module';

async function bootstrap() {
  const ssl = process.env.SSL === 'true' ? true : false;
  let httpsOptions = null;
  if (ssl) {
    const keyPath = process.env.SSL_KEY_PATH || '';
    const certPath = process.env.SSL_CERT_PATH || '';
    httpsOptions = {
      key: fs.readFileSync(path.join(__dirname, keyPath)),
      cert: fs.readFileSync(path.join(__dirname, certPath)),
    };
  }
  const app = await NestFactory.create(AppModule, { httpsOptions });
  const port = Number(process.env.PORT) || 3333;
  const hostname = process.env.HOSTNAME || 'localhost';
  await app.listen(port, hostname, () => {
    const address =
      'http' + (ssl ? 's' : '') + '://' + hostname + ':' + port + '/';
    Logger.log('Listening at ' + address);
  });
}

bootstrap();
```

We will now add `.local.env` with the configuration. 

```tsx
PORT=3334
HOSTNAME=dev.local
SSL=true
SSL_KEY_PATH="../../../dev-stack/certs/local-key.pem"
SSL_CERT_PATH="../../../dev-stack/certs/local-cert.pem"
```

🗒️ Here is some magic tricks done by Nx which will inject automatically `.local.env` when we will run the serve command. 

By default, Nx will load any environment variables you place in the following files:

1. `workspaceRoot/apps/my-app/.local.env`
2. `workspaceRoot/apps/my-app/.env`
3. `workspaceRoot/.local.env`
4. `workspaceRoot/.env`

You can see more on how Nx manage environment variables → [here](https://nx.dev/latest/angular/cli/overview#loading-environment-variables)

⚠️ IMPORTANT: the relative path to the certificate is from the dist folder (i.e. `dist/apps/nest-api`).

Now serve the app with the new configuration:

```bash
$ nx serve nest-api
```

You can open [https://dev.local:3334/](https://dev.local:3334/) which is secured with a valid certificate 🔐🎉

![https](https://dev-to-uploads.s3.amazonaws.com/i/0p49kv14qewmb8i924zq.png)

![certificate](https://dev-to-uploads.s3.amazonaws.com/i/wxleecpettdzkubx8l5b.png)

Feel free to change any configuration in environment variables, but don't forget to regenerate a new certificate with mkcert of you change the domain name ⚠️

See you in the next post!

# Github repository

 {% github Nightbr/full-https-development-environment %}