Configure Fastify security headers helmet plugin options

[Cjay-Cyber-2]

Description

Refine the configuration of the @fastify/helmet security plugin in the main Fastify server setup to strengthen HTTP header hardening for production.

Context & Requirements

The project includes @fastify/helmet in package.json, but default options might need tuning for Content Security Policy (CSP) or cross-origin settings compatible with the frontend application hosted on Vercel.

Acceptance Criteria

• Review and update @fastify/helmet initialization in src/index.ts or the app factory module.
• Ensure appropriate directives for CSP and frameguard without breaking API clients.
• Verify that existing integration tests and health checks remain unaffected.

Implementation Guidance

• Likely files to touch: src/index.ts or src/app.ts (wherever Fastify instance is created).
• Check helmet documentation for recommended API backend settings.

Testing & Validation

• Run npm run build and npm test to confirm compilation and test suite stability.

Submission Guidelines

• Open a Pull Request referencing Closes #<issue-number>.
• Adhere to TypeScript strict rules and existing codebase formatting standards.

---

Wave complexity: Trivial

[divysam]

@divysam has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello
I would love to work on this issue please

ℹ️ Repo Maintainers: To accept this application, review their application or assign @divysam to this issue.

[LiegeFx]

@LiegeFx has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi Maintainer, please assign this issue to me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @LiegeFx to this issue.

[Amas-01]

@Amas-01 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello, I would like to work on this issue. Please Assign me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Amas-01 to this issue.

[joydeelish]

@joydeelish has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Gm

Please Can i work on this issue

i would love to be a contributor to this great project

ℹ️ Repo Maintainers: To accept this application, review their application or assign @joydeelish to this issue.

[dotunv]

@dotunv has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hey maintainer. I will love to contribute to this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dotunv to this issue.

[drips-wave]

Congratulations, @dotunv! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @dotunv: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊