it/web/next.config.mjs
2025-10-25 20:37:00 +02:00

16 lines
614 B
JavaScript

/** @type {import('next').NextConfig} */
const nextConfig = {
poweredByHeader: false,
async headers() {
const headers = [
{ key: "X-Content-Type-Options", value: "nosniff" },
{ key: "X-Frame-Options", value: "SAMEORIGIN" },
{ key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
{ key: "Strict-Transport-Security", value: "max-age=63072000; includeSubDomains; preload" },
{ key: "Permissions-Policy", value: "geolocation=(), camera=(), microphone=(), interest-cohort=()" },
];
return [{ source: "/:path*", headers }];
},
};
export default nextConfig;