/
netlify.toml
53 lines (45 loc) · 1.34 KB
/
netlify.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
[build]
publish = "dist/"
command = "npm run build"
# Use my domain to point to Mastodon instance; @roman@romanvesely.com (or others) should be discoverable
[[redirects]]
from = "/.well-known/webfinger"
to = "https://mastodon.social/.well-known/webfinger?resource=acct:romanvesely@mastodon.social"
status = 200
# Redirect default Netlify subdomain to primary domain
[[redirects]]
from = "https://romanvesely.netlify.com/*"
to = "https://romanvesely.com/:splat"
status = 301
force = true
[[redirects]]
from = "/cv"
to = "https://docs.google.com/document/d/1bxwmJoQa8dN3uq5V2uEE2--hkWxFDdGy208EEMa5SYA"
status = 302
[[redirects]]
from = "/talks"
to = "/"
status = 302
[[redirects]]
from = "/projects"
to = "/"
status = 302
[[redirects]]
from = "/playground"
to = "/"
status = 302
# Use my domain to point to (temporary) Mastodon account
[[redirects]]
from = "/@roman"
to = "https://mastodon.social/@romanvesely"
status = 302
# Check results https://securityheaders.com
[[headers]]
for = "/*"
[headers.values]
# Content-Security-Policy-Report-Only = "default-src 'self'; script-src 'self'"
Feature-Policy = "camera 'none'; microphone 'none'"
Referrer-Policy = "strict-origin-when-cross-origin"
X-Frame-Options = "DENY"
X-XSS-Protection = "1; mode=block"
X-Content-Type-Options = "nosniff"