template/netlify.toml at main · gethinode/template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# Auto-generated file - do not modify
[build]
  command = 'npm run build'
  publish = 'public'

  [build.environment]
    DART_SASS_VERSION = '1.98.0'
    HUGO_ENABLEGITINFO = 'true'
    HUGO_ENV = 'production'
    HUGO_VERSION = '0.158.0'
    NODE_VERSION = '24.12.0'
    NPM_VERSION = '11.6.2'

[context]
  [context.branch-deploy]
    command = 'npm run build -- -b $DEPLOY_PRIME_URL'

  [context.deploy-preview]
    command = 'npm run build -- -b $DEPLOY_PRIME_URL'

[dev]
  autoLaunch = false
  command = 'npm run start'
  framework = '#custom'
  port = 8888
  publish = 'public'
  targetPort = 1313

[[plugins]]
  package = 'netlify-plugin-hugo-cache-resources'

[[headers]]
  for = '/**'

  [headers.values]
    Access-Control-Allow-Origin = '*'
    Content-Security-Policy = """
        base-uri 'self'; \
        connect-src 'self' *.analytics.google.com *.google.com *.google-analytics.com *.googletagmanager.com; \
        default-src 'none'; \
        font-src 'self' fonts.gstatic.com data:; \
        form-action 'self'; \
        frame-ancestors 'self'; \
        frame-src *.googletagmanager.com player.cloudinary.com www.youtube-nocookie.com www.youtube.com player.vimeo.com; \
        img-src 'self' *.google-analytics.com *.googletagmanager.com googletagmanager.com ssl.gstatic.com www.gstatic.com data: *.imgix.net *.imagekit.io *.cloudinary.com i.ytimg.com tile.openstreetmap.org i.vimeocdn.com; \
        manifest-src 'self'; \
        media-src 'self'; \
        object-src 'none'; \
        script-src 'self' *.google-analytics.com *.googletagmanager.com *.analytics.google.com googletagmanager.com tagmanager.google.com player.vimeo.com; \
        style-src 'self' googletagmanager.com tagmanager.google.com fonts.googleapis.com www.youtube.com 'unsafe-inline'; \
        """
    Permissions-Policy = 'geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=() '
    Referrer-Policy = 'strict-origin'
    Strict-Transport-Security = 'max-age=31536000; includeSubDomains; preload'
    X-Content-Type-Options = 'nosniff'
    X-XSS-Protection = '1; mode=block'
    cache-control = 'max-age=0, no-cache, no-store, must-revalidate '