botsmann/next.config.js at main · bitbaum/botsmann · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
/** @type {import('next').NextConfig} */
const nextConfig = {
  output: 'standalone',
  images: {
    unoptimized: true,
    remotePatterns: [
      {
        protocol: 'https',
        hostname: 'raw.githubusercontent.com',
        pathname: '/g-but/botsmann-blog-content/**',
      },
    ],
  },
  serverExternalPackages: ['onnxruntime-node', '@xenova/transformers', 'sharp'],
  // typedRoutes graduated from `experimental` to a stable top-level option in Next 16.
  typedRoutes: true,
  env: {
    NEXT_PUBLIC_DEPLOY_TIME: new Date().toUTCString(),
  },
  // Redirects for URL structure migration
  async redirects() {
    return [
      // Documents -> My Data
      {
        source: '/documents',
        destination: '/my-data',
        permanent: true,
      },
      // Create -> Personal
      {
        source: '/create',
        destination: '/personal',
        permanent: true,
      },
      // Solutions -> Enterprise (consolidation)
      {
        source: '/solutions/businesses',
        destination: '/enterprise',
        permanent: true,
      },
      {
        source: '/solutions/governments',
        destination: '/enterprise',
        permanent: true,
      },
    ];
  },
  headers: async () => {
    const securityHeaders = [
      {
        key: 'Strict-Transport-Security',
        value: 'max-age=31536000; includeSubDomains',
      },
      {
        key: 'X-Content-Type-Options',
        value: 'nosniff',
      },
      {
        key: 'X-Frame-Options',
        value: 'DENY',
      },
      {
        key: 'Referrer-Policy',
        value: 'strict-origin-when-cross-origin',
      },
      {
        key: 'Permissions-Policy',
        value: 'camera=(), microphone=(), geolocation=()',
      },
      {
        key: 'Content-Security-Policy',
        value: [
          "default-src 'self'",
          "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://giscus.app https://platform.twitter.com https://fleetcrown.orangecat.ch",
          "style-src 'self' 'unsafe-inline'",
          "img-src 'self' data: blob: https://raw.githubusercontent.com https://images.unsplash.com",
          "font-src 'self'",
          "connect-src 'self' https://api.groq.com https://openrouter.ai https://api.openai.com https://api.github.com https://raw.githubusercontent.com https://*.supabase.co https://supabase.orangecat.ch https://fleetcrown.orangecat.ch",
          "frame-src 'self' https://www.youtube.com https://giscus.app",
          "frame-ancestors 'none'",
        ].join('; '),
      },
    ];

    return [
      {
        source: '/api/:path*',
        headers: [{ key: 'Cache-Control', value: 'no-store, max-age=0' }],
      },
      {
        source: '/(.*)',
        headers: securityHeaders,
      },
      {
        source: '/((?!api).*)',
        headers: [
          {
            key: 'Cache-Control',
            value: 'public, max-age=3600, s-maxage=86400, stale-while-revalidate=60',
          },
        ],
      },
    ];
  },
};

module.exports = nextConfig;