dashboard/next.config.ts at main · TrickfireRobotics/dashboard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
import type { NextConfig } from "next";
import { withSentryConfig } from "@sentry/nextjs";

const imgSrc = [
    "'self'",
    "data:",
    "https://mc-heads.net",
    "https://s.namemc.com",
    "https://textures.minecraft.net",
].join(" ");

const isDev = process.env.NODE_ENV === "development";

const csp = [
    "default-src 'self'",
    `script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com${isDev ? " 'unsafe-eval'" : ""}`,
    "style-src 'self' 'unsafe-inline'",
    `img-src ${imgSrc}`,
    "connect-src 'self' https://cloudflareinsights.com",
    "font-src 'self'",
    "frame-src 'self'",
    "frame-ancestors 'none'",
    "base-uri 'self'",
    "form-action 'self'",
]
    .join("; ")
    .trim();

const securityHeaders = [
    { key: "Strict-Transport-Security", value: "max-age=31536000; includeSubDomains; preload" },
    { key: "X-Content-Type-Options", value: "nosniff" },
    { key: "X-Frame-Options", value: "DENY" },
    { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
    { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" },
    { key: "Content-Security-Policy", value: csp },
];

const pl3xmapHeaders = [
    { key: "Strict-Transport-Security", value: "max-age=31536000; includeSubDomains; preload" },
    { key: "X-Content-Type-Options", value: "nosniff" },
    { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
];

const nextConfig: NextConfig = {
    output: "standalone",
    serverExternalPackages: ["better-sqlite3", "systeminformation"],
    async headers() {
        return [
            {
                source: "/((?!pl3xmap).*)",
                headers: securityHeaders,
            },
            {
                source: "/pl3xmap/:path*",
                headers: pl3xmapHeaders,
            },
        ];
    },
};

export default withSentryConfig(nextConfig, {
    org: "trickfire-robotics",
    project: "dashboard",
    silent: !process.env.CI,
    widenClientFileUpload: true,
    tunnelRoute: "/api/intake",

    webpack: {
        treeshake: {
            removeDebugLogging: true,
        },
    },
});