Try to apply special headers to deploy preview

.drone.jsonnet

@@ -1,21 +1,23 @@
 local Volume = { name: 'site', path: '/site' };
-local NetlifyStep(env, prod) = {
+local NetlifyStep(env) =
-  name: 'netlify deploy ' + env,
+  local prod = env == 'production';
-  image: 'internetmat/drone-netlify',
+  {
-  volumes: [Volume],
+    name: 'netlify deploy ' + env,
-  settings: {
+    image: 'internetmat/drone-netlify',
-    token: { from_secret: 'netlify_token' },
+    volumes: [Volume],
-    site: { from_secret: 'netlify_site_id' },
+    settings: {
-    path: '/site',
+      token: { from_secret: 'netlify_token' },
-    prod: prod,
+      site: { from_secret: 'netlify_site_id' },
-  },
+      path: '/site',
-  when: if prod then {
+      prod: prod,
-    event: ['promote'],
+    },
-    target: ['prod'],
+    when: if prod then {
-  } else {
+      event: ['promote'],
-    target: { exclude: ['prod'] },
+      target: ['production'],
-  },
+    } else {
-};
+      target: { exclude: ['production'] },
+    },
+  };
 {
   kind: 'pipeline',
   type: 'docker',
@@ -37,7 +39,7 @@ local NetlifyStep(env, prod) = {
         'cp -r result/* /site/',
       ],
     },
-    NetlifyStep('staging', false),
+    NetlifyStep('staging'),
-    NetlifyStep('prod', true),
+    NetlifyStep('production'),
   ],
 }

netlify.toml

@@ -46,4 +46,15 @@
       allow-popups-to-escape-sandbox
     '''
 
+[context.deploy-preview]
+  [[headers]]
+      for = "/*"
+
+      [headers.values]
+        Permissions-Policy = "interest-cohort=()"
+        Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
+        X-Content-Type-Options = "nosniff"
+        X-Frame-Options = "DENY"
+        Referrer-Policy = "no-referrer"
+        Content-Security-Policy = ""