From ef564ee4e57db5a511f18ce2afcd12f0cc230cf9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Sat, 30 May 2026 13:42:43 +0300
Subject: [PATCH] =?UTF-8?q?refactor:=20=D1=88=D0=B0=D0=B3=208=20=E2=80=94?=
 =?UTF-8?q?=20server.js=20=D1=83=D0=BF=D1=80=D0=BE=D1=89=D1=91=D0=BD=20?=
 =?UTF-8?q?=D0=B4=D0=BE=20131=20=D1=81=D1=82=D1=80=D0=BE=D0=BA=D0=B8=20(?=
 =?UTF-8?q?=D1=82=D0=BE=D0=BB=D1=8C=D0=BA=D0=BE=20init=20+=20=D1=80=D0=BE?=
 =?UTF-8?q?=D1=83=D1=82=D0=B5=D1=80=D1=8B)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 server.js | 32 ++++++++++++++++++++++++--------
 1 file changed, 24 insertions(+), 8 deletions(-)

diff --git a/server.js b/server.js
index 491f5ef..982344c 100644
--- a/server.js
+++ b/server.js
@@ -1,18 +1,34 @@
+/**
+ * server.js — точка входа приложения.
+ *
+ * Отвечает только за:
+ *   1. Инициализацию Express и глобальных middleware (helmet, static, body-parser)
+ *   2. Инициализацию auth (initAuth) и CSRF (initCsrf)
+ *   3. Подключение роутеров из src/routes/ с передачей зависимостей
+ *   4. Старт HTTP-сервера
+ *
+ * Бизнес-логика — в src/routes/*.js
+ * DB-запросы   — в src/queries.js
+ * Auth/JWT     — в src/auth.js
+ * Валидация    — в src/validators.js
+ * Конфиг/хелперы — в src/config.js
+ */
+
+'use strict';
+
 const express = require('express');
 const cookieParser = require('cookie-parser');
 const path = require('path');
 const helmet = require('helmet');
-// rateLimit.js: mutationLimiter (POST-роуты) и exportLimiter (GET /export)
-const { mutationLimiter, exportLimiter } = require('./src/middleware/rateLimit');
-// csrf.js: фабрика для инициализации CSRF-защиты (double-submit cookie pattern)
-const { initCsrf } = require('./src/middleware/csrf');
 require('dotenv').config();
-const { checkConnection } = require('./src/db');
+
+const { checkConnection }  = require('./src/db');
 const { initAuth, requireAdmin } = require('./src/auth');
-const { aggregateCIDRs } = require('./src/validators');
-const q = require('./src/queries');
-// config.js: MOCK_USERS (мок-пользователи для dev) и backUrl (хелпер редиректа)
+const { aggregateCIDRs }   = require('./src/validators');
+const q                    = require('./src/queries');
 const { MOCK_USERS, backUrl } = require('./src/config');
+const { mutationLimiter, exportLimiter } = require('./src/middleware/rateLimit');
+const { initCsrf }         = require('./src/middleware/csrf');
 
 const app = express();
 const PORT = process.env.PORT || 3000;