fundwave/next.config.ts at main · walonCode/fundwave · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
import type { NextConfig } from "next";

const nextConfig: NextConfig = {
  poweredByHeader: false,
  // Security headers
  async headers() {
    return [
      {
        source: '/(.*)',
        headers: [
          { key: 'X-Content-Type-Options', value: 'nosniff' },
          { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
          { key: 'X-Frame-Options', value: 'DENY' },
          { key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' },
          // HSTS (only works over HTTPS; adjust max-age as needed)
          { key: 'Strict-Transport-Security', value: 'max-age=63072000; includeSubDomains; preload' },
        ],
      },
    ]
  },
  // Allow admin subdomain cross-origin requests in development
  ...(process.env.NODE_ENV === 'development' && {
    allowedDevOrigins: ['admin.localhost:3000'],
  }),
  images: {
    remotePatterns: [
      //development
      {
        protocol: 'https',
        hostname: 'iziaioorslstbzozmwte.storage.supabase.co',
        port: '',
        pathname: '/storage/v1/object/sign/**',
      },
      {
        protocol: 'https',
        hostname: 'iziaioorslstbzozmwte.supabase.co',
        port: '',
        pathname: '/storage/v1/object/sign/**',
      },


      //production
      {
        protocol: 'https',
        hostname: 'lutmdjilgtykwwzsgnnj.storage.supabase.co',
        port: '',
        pathname: '/storage/v1/object/sign/**',
      },
      {
        protocol: 'https',
        hostname: 'lutmdjilgtykwwzsgnnj.supabase.co',
        port: '',
        pathname: '/storage/v1/object/sign/**',
      },
      {
        protocol: "https",
        hostname: "images.clerk.dev", // Clerk profile avatars
      },
    ],
  },
};

export default nextConfig;