Harden your node-app with an nginx server

nginx.conf

 http {
    #Note: Middleware needs to support: res.setHeader("Cache-Control", "public, max-age=" + seconds);
    proxy_cache_path  /var/cache/nginx levels=1:2 keys_zone=one:8m max_size=3000m inactive=600m;
    proxy_temp_path /var/tmp;
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;

    gzip on;
    gzip_comp_level 6;
    gzip_vary on;
    gzip_min_length  1000;
    gzip_proxied any;
    #text/html is always included as default. So don't need to include here
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
    #gzip_buffers 16 8k;

    upstream app {
      server 127.0.0.1:3000;
      server 127.0.0.1:1337;
      keepalive 64;
    }

    server {
        listen 80;
        #listen 443 ssl;

        server_name localhost;

        #error_page 502  /errors/502.html;

        location ~ ^/(images/|img/|javascript/|js/|css/|stylesheets/|styles/|media/|static/|assets/|robots.txt|humans.txt|favicon.ico) {
          root /home/username/apps/app/public;
          #root /home/username/apps/app/assets;
          access_log off;
          expires max;
        }

        #location /errors {
        #  internal;
        #  alias /usr/local/silly_face_society/node/public/errors;
        #}

        location / {
          proxy_redirect off;
          proxy_set_header   X-Real-IP            $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header   X-Forwarded-Proto $scheme;
          proxy_set_header   Host                   $http_host;
          proxy_set_header   X-NginX-Proxy    true;
          proxy_set_header   Connection "";
          proxy_http_version 1.1;
          proxy_cache one;
          proxy_cache_key sfs$request_uri$scheme;
          proxy_pass         http://app;
        }
    }
}