Security Hardening & Performance Optimization

[levelslip]

• Description: Finalize security middleware, setup CI/CD, and optimize
• Activities:
  • Implement rate limiting using express-rate-limit and Redis store.
  • Setup helmet for HTTP security headers.
  • Setup strict CORS configuration allowing only Vercel frontend domains.
  • Audit logging middleware for sensitive DB operations.
  • Optimize Prisma queries (solve N+1 issues using include correctly).
  • Setup GitHub Actions CI/CD pipeline (Linting, Jest testing on PRs).
• Deliverables: Rate limiting, Helmet setup, optimized Prisma queries, CI/CD YAML files