Add context.production
continuous-integration/drone/push Build is passing Details
continuous-integration/drone Build is passing Details

pull/1/head
mat ess 2022-10-20 20:41:03 -04:00
parent e47fd1903c
commit 1cf880cec7
1 changed files with 37 additions and 36 deletions

View File

@ -7,44 +7,45 @@
publish = "public/" publish = "public/"
port = 1111 port = 1111
[[redirects]] [context.production]
from = "https://mat-services.netlify.app/*" [[redirects]]
to = "https://mat.services/:splat" from = "https://mat-services.netlify.app/*"
force = true to = "https://mat.services/:splat"
force = true
[[headers]] [[headers]]
for = "/*" for = "/*"
[headers.values] [headers.values]
# disable FLoC tracking # disable FLoC tracking
Permissions-Policy = "interest-cohort=()" Permissions-Policy = "interest-cohort=()"
# enable HSTS # enable HSTS
Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload" Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
# disable clients from sniffing the media type # disable clients from sniffing the media type
X-Content-Type-Options = "nosniff" X-Content-Type-Options = "nosniff"
# clickjacking protection # clickjacking protection
X-Frame-Options = "DENY" X-Frame-Options = "DENY"
# keep referrer data off of HTTP connections # keep referrer data off of HTTP connections
Referrer-Policy = "no-referrer" Referrer-Policy = "no-referrer"
# content security policy # content security policy
# style-src 'unsafe-inline': syntax highlighting in codefences # style-src 'unsafe-inline': syntax highlighting in codefences
# sandbox allow-popups: enable target="_blank" links to open in new tabs # sandbox allow-popups: enable target="_blank" links to open in new tabs
Content-Security-Policy = ''' Content-Security-Policy = '''
default-src 'none'; default-src 'none';
img-src 'self' https://mat.services https://stats.mat.services; img-src 'self' https://mat.services https://stats.mat.services;
style-src 'self' https://mat.services 'unsafe-inline'; style-src 'self' https://mat.services 'unsafe-inline';
font-src 'self' https://mat.services; font-src 'self' https://mat.services;
script-src 'self' https://mat.services https://stats.mat.services; script-src 'self' https://mat.services https://stats.mat.services;
form-action 'none'; form-action 'none';
frame-ancestors 'none'; frame-ancestors 'none';
base-uri 'none'; base-uri 'none';
upgrade-insecure-requests; upgrade-insecure-requests;
sandbox sandbox
allow-same-origin allow-same-origin
allow-scripts allow-scripts
allow-popups allow-popups
allow-popups-to-escape-sandbox allow-popups-to-escape-sandbox
''' '''
[context.deploy-preview] [context.deploy-preview]
[[headers]] [[headers]]