node-http-server
node-http-server — HTTP and HTTPS static server for Node.js

Native HTTP + HTTPS · Node.js 22.12+ · CommonJS + Node.js ESM

Start an HTTP or HTTPS static server.

Serve the same static-file contract over HTTP, HTTPS-only, or paired listeners with ranges, cache validation, optional compression, clean shutdown, and zero runtime dependencies.

Runtime boundary: node-http-server serves files to browsers; the package itself executes only in Node.js. CommonJS and ESM are Node.js module entry points, not browser entry points. Browser-targeted bundles, native-browser ESM, import maps, and file:// are not supported runtime paths.
Quick startBrowse all docs

CLI quick start

Serve a folder locally.

Install the command globally, or use npx. The default listener is reachable only from this machine.

shell
npm install --global node-http-server
node-http-server --root ./public
Expected output
node-http-server listening at http://127.0.0.1:8080
Package runner: run npx node-http-server --root ./public. See the CLI task guide for flags, failures, exit behavior, and deployment examples.

Library quick start

Create an isolated server.

CommonJS
const {Server}=require('node-http-server');

new Server({root:'./public'}).deploy();
Node.js ESM
import {Server} from 'node-http-server';

new Server({root:'./public'}).deploy();

The original default singleton remains available in both module systems. New applications should normally create a named Server instance so listener and configuration state stay isolated.

Import reference →Multiple servers and shutdown →

Starting behavior

Know the defaults before changing them.

127.0.0.1Listen address
8080HTTP port
index.htmlDirectory index
current directoryStatic root
BehaviorDefaultChange it
Request-body limitUnlimitedserver.maxRequestBodyBytes
CompressionOffserver.compression
SPA fallbackOffserver.spaFallback
DotfilesBlocked with 403server.allowDotfiles
Automatic MIME typesBuilt-in mapcontentType
Request loggingOfflog
HTTPSOffhttps
Network exposure: set host:'0.0.0.0' or --host 0.0.0.0 only when other machines should connect. Read Operations and security first.

Documentation by task

Go directly to the job.

Evaluate the fit

Decision signals, project fit, interfaces, boundaries, and engineering evidence.

Why node-http-server → Run the command

Install, flags, common tasks, expected output, and failure behavior.

CLI → Embed the server

Imports, lifecycle, public methods, request data, and hooks.

Library API → Set exact behavior

Every Config key, default, opt-out value, and validation rule.

Configuration → Serve with HTTPS

HTTPS-only and paired listeners, key/certificate settings, lifecycle, and deployment patterns.

HTTPS guide → Copy a working pattern

SPA, HTTPS, domains, logging, hooks, limits, and shutdown.

Examples → Generate a config

Build CommonJS, Node.js ESM, CLI, or JSON without running a server.

Playground → Test and measure

Test commands, coverage gates, reports, badges, and CI artifacts.

Testing → Inspect performance

9.0.2 comparison results, workload contracts, raw samples, and reproduction.

Performance → Operate or upgrade

Exposure, status failures, logging, certificates, and migration to v10 HTTP/2.

Operations → Browse the docs hub

A compact map of every page and the source documents.

Docs hub →

Project status

Published facts and measured coverage.

CI statusCINode 22.12 and 24 on main. npm versionnpmLatest published package. Line coverageLine coverageUbuntu Node coverage report. Zero runtime dependenciesDependenciesZero runtime; one owner-maintained dev tool.