-
Notifications
You must be signed in to change notification settings - Fork 0
/
next.config.js
80 lines (71 loc) · 2.86 KB
/
next.config.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
// https://github.com/Automattic/node-canvas/issues/1779#issuecomment-895885846
// For building on vercel: https://github.com/Automattic/node-canvas/issues/1779
if (
process.env.LD_LIBRARY_PATH == null ||
!process.env.LD_LIBRARY_PATH.includes(`${process.env.PWD}/node_modules/canvas/build/Release:`)
) {
process.env.LD_LIBRARY_PATH = `${process.env.PWD}/node_modules/canvas/build/Release:${
process.env.LD_LIBRARY_PATH || ''
}`
}
const withPWA = require('next-pwa')
const withPlugins = require('next-compose-plugins')
const withBundleAnalyzer = require('@next/bundle-analyzer')({
enabled: process.env.ANALYZE === 'true',
})
// https://github.com/leerob/leerob.io/blob/main/next.config.js
const securityHeaders = [
// https://securityheaders.com
// https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
{
key: 'Content-Security-Policy',
value: [
`default-src 'self'`,
`script-src 'self' 'unsafe-eval' 'unsafe-inline' utteranc.es *.youtube.com *.twitter.com cdn.usefathom.com *.google-analytics.com`,
`child-src *.youtube.com *.google.com *.twitter.com utteranc.es`,
`style-src 'self' 'unsafe-inline' *.googleapis.com`,
`img-src * blob: data:`,
`worker-src 'self'`,
`media-src 'none'`,
`frame-src utteranc.es`,
`connect-src *`,
`font-src 'self'`,
].join('; '),
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
{ key: 'Referrer-Policy', value: 'origin-when-cross-origin' },
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
{ key: 'X-Frame-Options', value: 'DENY' },
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
{ key: 'X-Content-Type-Options', value: 'nosniff' },
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control
{ key: 'X-DNS-Prefetch-Control', value: 'on' },
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains; preload' },
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
// Opt-out of Google FLoC: https://amifloced.org/
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=(), interest-cohort=()' },
]
module.exports = withPlugins(
[
[withBundleAnalyzer],
[withPWA, { pwa: { dest: 'public', dynamicStartUrl: false, disable: process.env.NODE_ENV === 'development' } }],
],
{
experimental: { esmExternals: true },
pageExtensions: ['ts', 'tsx'],
// scrollRestoration: false,
reactStrictMode: true,
images: {
domains: ['github.com', 'opengraph.githubassets.com', 'vercel.app', 'github.io', 'source.unsplash.com'],
},
async headers() {
return [
{
source: '/(.*)',
headers: securityHeaders,
},
]
},
},
)