netlify.toml

# Netlify Development Environment Configuration

[build]
  command = "cd themes/toha && npm ci --legacy-peer-deps && cd ../.. && npm ci --legacy-peer-deps && cd src && npm ci --legacy-peer-deps && npm run build && cd .. && hugo --config config.development.yaml --gc --minify"
  publish = "public"

[build.environment]
  NODE_VERSION = "18"
  NPM_FLAGS = "--legacy-peer-deps"
  SECRETS_SCAN_ENABLED = "false"
  HUGO_VERSION = "0.146.0"
  HUGO_EXTENDED = "true"
  HUGO_ENV = "development"

# Development-specific redirects
[[redirects]]
  from = "/api/crm/*"
  to = "https://200rxio-crm-development.up.railway.app/api/:splat"
  status = 200
  force = true

[[redirects]]
  from = "/api/ai/*"
  to = "https://dev-200rx.netlify.app/:splat"
  status = 200
  force = true

# Development headers with permissive CSP
[[headers]]
  for = "/*"
  [headers.values]
    X-Frame-Options = "DENY"
    X-XSS-Protection = "1; mode=block"
    X-Content-Type-Options = "nosniff"
    Referrer-Policy = "strict-origin-when-cross-origin"
    Permissions-Policy = "camera=(), microphone=(), geolocation=(), interest-cohort=()"
    Content-Security-Policy = "default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data:; connect-src 'self' https://dev-200rx.netlify.app/ https://*.netlify.app https://200rxio-crm-development.up.railway.app https://portfolio-ai-development.up.railway.app http://localhost:3000 http://localhost:3001; frame-ancestors 'none';"
    X-Environment = "development"

# Development environment badge
[[headers]]
  for = "/"
  [headers.values]
    X-Dev-Environment = "This is a development environment"