fastify-security-headers.plugin.ts

import { FastifyPluginAsync } from 'fastify';
import fp from 'fastify-plugin';

// https://www.fastify.io/docs/latest/TypeScript/#creating-a-typescript-fastify-plugin

const securityHeadersPlugin: FastifyPluginAsync = async (fastify) => {
  fastify.addHook('onRequest', async (_req, res) => {
    res.header('Strict-Transport-Security', 'max-age=31536000; includeSubDomains; preload');
    res.header('X-Content-Type-Options', 'nosniff');
  });
};

export const securityHeadersFastifyPlugin = fp(securityHeadersPlugin, {
  fastify: '^3.24.0',
  name: 'fastify-security-headers',
});