vercel.json

{
	"buildCommand": "bunx varlock run -- bun scripts/deploy.ts",
	"framework": "sveltekit",
	"headers": [
		{
			"source": "/(.*)",
			"headers": [
				{ "key": "X-Content-Type-Options", "value": "nosniff" },
				{ "key": "X-Frame-Options", "value": "DENY" },
				{ "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" },
				{
					"key": "Permissions-Policy",
					"value": "camera=(), microphone=(), geolocation=(), browsing-topics=(), payment=(), usb=(), serial=()"
				},
				{ "key": "X-DNS-Prefetch-Control", "value": "off" },
				{ "key": "Strict-Transport-Security", "value": "max-age=63072000; includeSubDomains" },
				{
					"key": "Content-Security-Policy",
					"value": "frame-ancestors 'none'"
				},
				{ "key": "Cross-Origin-Opener-Policy", "value": "same-origin-allow-popups" },
				{ "key": "Cross-Origin-Resource-Policy", "value": "same-origin" }
			]
		},
		{
			"source": "/logo-email.png",
			"headers": [{ "key": "Cross-Origin-Resource-Policy", "value": "cross-origin" }]
		}
	]
}