Update for Svelte

Author: brendan-ward

deploy/dev/README.md

@@ -32,8 +32,13 @@ and `/var/www/southeastssa`.
 Note: these must be built with
 
 ```
-SITE_URL=https://localhost:8080/southeastblueprint
-SITE_ROOT_PATH=southeastblueprint
+PUBLIC_MAPBOX_TOKEN=<token>
+PUBLIC_API_TOKEN=<token>
+PUBLIC_SENTRY_DSN=<DSN>
+PUBLIC_GOOGLE_ANALYTICS_ID=<id>
+PUBLIC_API_HOST=<API host>
+PUBLIC_TILE_HOST=<tile host>
+PUBLIC_CONTACT_EMAIL=<contact email>
 ```
 
 and

deploy/production-geoplatform/Caddyfile

@@ -12,8 +12,7 @@ ifwaz-sebp-prod.fws.doi.net {
   route {
     # common headers
     header X-Frame-Options "DENY"
-    header Content-Security-Policy "connect-src 'self' *.googletagmanager.com *.google-analytics.com *.mapbox.com *.sentry.io; img-src 'self' *.mapbox.com data: blob:; media-src 'self' *.mapbox.com; worker-src 'self' blob:; style-src 'unsafe-inline' 'self' *.mapbox.com; script-src 'unsafe-inline' 'self' *.googletagmanager.com *.mapbox.com *.sentry.io blob:; child-src 'self' blob:;frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none';font-src 'self'; manifest-src 'self';"
-    header X-Content-Type-Options nosniff
+    header Content-Security-Policy "connect-src 'self' *.googletagmanager.com *.google-analytics.com *.mapbox.com *.sentry.io; img-src 'self' *.mapbox.com data: blob:; media-src 'self' *.mapbox.com; worker-src 'self' blob:; style-src 'unsafe-inline' 'self' *.mapbox.com; script-src 'unsafe-inline' 'self' *.googletagmanager.com *.mapbox.com *.sentry.io blob:; child-src 'self' blob:;frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none';font-src 'self' data:; manifest-src 'self';"
     header Referrer-Policy "strict-origin"
     header Cross-Origin-Resource-Policy "cross-origin"
     header Cross-Origin-Embedder-Policy "require-corp"
@@ -29,6 +28,9 @@ ifwaz-sebp-prod.fws.doi.net {
       reverse_proxy mbtileserver:8000
     }
 
+    # this header is already handled by mbtileserver
+    header X-Content-Type-Options nosniff
+
     encode zstd gzip
 
     route /southeastblueprint/api/* {

deploy/production-geoplatform/README.md

@@ -12,8 +12,8 @@ ifwaz-sebp-test.fws.doi.net {
   route {
     # common headers
     header X-Frame-Options "DENY"
-    header Content-Security-Policy "connect-src 'self' *.googletagmanager.com *.google-analytics.com *.mapbox.com *.sentry.io; img-src 'self' *.mapbox.com data: blob:; media-src 'self' *.mapbox.com; worker-src 'self' blob:; style-src 'unsafe-inline' 'self' *.mapbox.com; script-src 'unsafe-inline' 'self' *.googletagmanager.com *.mapbox.com *.sentry.io blob:; child-src 'self' blob:;frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none';font-src 'self'; manifest-src 'self';"
-    header X-Content-Type-Options nosniff
+    header Content-Security-Policy "connect-src 'self' *.googletagmanager.com *.google-analytics.com *.mapbox.com *.sentry.io; img-src 'self' *.mapbox.com data: blob:; media-src 'self' *.mapbox.com; worker-src 'self' blob:; style-src 'unsafe-inline' 'self' *.mapbox.com; script-src 'unsafe-inline' 'self' *.googletagmanager.com *.mapbox.com *.sentry.io blob:; child-src 'self' blob:;frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none';font-src 'self' data:; manifest-src 'self';"
+
     header Referrer-Policy "strict-origin"
     header Cross-Origin-Resource-Policy "cross-origin"
     header Cross-Origin-Embedder-Policy "require-corp"
@@ -29,6 +29,9 @@ ifwaz-sebp-test.fws.doi.net {
       reverse_proxy mbtileserver:8000
     }
 
+    # this header is already handled by mbtileserver
+    header X-Content-Type-Options nosniff
+
     encode zstd gzip
 
     route /test-southeastblueprint/api/* {
@@ -41,6 +44,8 @@ ifwaz-sebp-test.fws.doi.net {
       reverse_proxy ssa-api:5000
     }
 
+
+
     # most files can be cached indefinitely, they are rebuilt with new names each time
     @cached_files {
       path *.jpg *.jpeg *.png *.gif *.ico *.webp *.svg *.css *.js *.woff *.woff2 */static/*

deploy/production-geoplatform/docker-compose.yml

@@ -149,19 +149,19 @@ source ~/secas-docker/deploy/staging/.env
 Create `~/secas-blueprint/ui/.env.production` with the following:
 
 ```bash
-GATSBY_MAPBOX_API_TOKEN=<mapbox token>
-GATSBY_SENTRY_DSN=<dsn>
-GATSBY_GOOGLE_ANALYTICS_ID=<id>
-GATSBY_API_TOKEN=<api token>
-
-SITE_ROOT_PATH=test-southeastblueprint
-# specific to domain where this is deployed
-SITE_URL=<root URL>/test-southeastblueprint
-GATSBY_API_HOST=<root URL>/test-southeastblueprint
-GATSBY_TILE_HOST=<root URL>/test-southeastblueprint
+PUBLIC_MAPBOX_TOKEN=<token>
+PUBLIC_API_TOKEN=<token>
+PUBLIC_SENTRY_DSN=<DSN>
+PUBLIC_GOOGLE_ANALYTICS_ID=<id>
+PUBLIC_CONTACT_EMAIL=<contact email>
 
 # show warning in UI when on staging server
-GATSBY_ENV="staging
+PUBLIC_DEPLOY_ENV="staging"
+
+# specific to domain where this is deployed
+DEPLOY_PATH=/test-southeastblueprint
+PUBLIC_API_HOST=<API host>/test-southeastblueprint
+PUBLIC_TILE_HOST=<tile host>/test-southeastblueprint
 ```
 
 Create `~/secas-ssa/ui/.env.production` with the following: