netlify.toml

# Netlify configuration for the statically-exported Next.js app.
# `next build` (with output:"export" in next.config.mjs) emits ./out,
# which Netlify serves directly — no adapter or functions needed.

[build]
  command = "npm run build"
  publish = "out"

[build.environment]
  NODE_VERSION = "20"

# Long-cache the self-hosted vendor bundle and the logic scripts (they're
# content-stable; bump the filename if you ever change them).
[[headers]]
  for = "/vendor/*"
  [headers.values]
    Cache-Control = "public, max-age=31536000, immutable"

# Basic security headers — safe defaults for a static content site.
[[headers]]
  for = "/*"
  [headers.values]
    X-Content-Type-Options = "nosniff"
    Referrer-Policy = "strict-origin-when-cross-origin"
    X-Frame-Options = "SAMEORIGIN"