damjan_savicandClaude Sonnet 4.5
cc1217e929
- Move CSP, HSTS, Referrer-Policy, and Permissions-Policy from next.config.ts to middleware - Compose headers with next-intl middleware to ensure they propagate through rewrites - Security headers now set via response.headers.set() in middleware after i18n routing - All security headers should now appear in HTTP responses Fixes QA issue: headers from next.config.ts not appearing due to middleware rewrites Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
120 lines
2.6 KiB
TypeScript
120 lines
2.6 KiB
TypeScript
import type { NextConfig } from 'next';
|
|
import createMDX from '@next/mdx';
|
|
import createNextIntlPlugin from 'next-intl/plugin';
|
|
|
|
const withNextIntl = createNextIntlPlugin('./src/i18n/request.ts');
|
|
|
|
const nextConfig: NextConfig = {
|
|
output: 'standalone',
|
|
|
|
pageExtensions: ['js', 'jsx', 'md', 'mdx', 'ts', 'tsx'],
|
|
|
|
images: {
|
|
formats: ['image/avif', 'image/webp'],
|
|
deviceSizes: [640, 750, 828, 1080, 1200, 1920, 2048],
|
|
imageSizes: [16, 32, 48, 64, 96, 128, 256, 384],
|
|
remotePatterns: [
|
|
{
|
|
protocol: 'https',
|
|
hostname: 'mxadgucxhmstlzsbgmoz.supabase.co',
|
|
},
|
|
],
|
|
},
|
|
|
|
experimental: {
|
|
optimizePackageImports: ['lucide-react', 'framer-motion'],
|
|
},
|
|
|
|
async headers() {
|
|
return [
|
|
{
|
|
source: '/:path*',
|
|
headers: [
|
|
{
|
|
key: 'X-DNS-Prefetch-Control',
|
|
value: 'on',
|
|
},
|
|
{
|
|
key: 'X-Frame-Options',
|
|
value: 'SAMEORIGIN',
|
|
},
|
|
{
|
|
key: 'X-Content-Type-Options',
|
|
value: 'nosniff',
|
|
},
|
|
// Security headers moved to middleware (CSP, HSTS, Referrer-Policy, Permissions-Policy)
|
|
],
|
|
},
|
|
{
|
|
source: '/fonts/:path*',
|
|
headers: [
|
|
{
|
|
key: 'Cache-Control',
|
|
value: 'public, max-age=31536000, immutable',
|
|
},
|
|
],
|
|
},
|
|
{
|
|
source: '/images/:path*',
|
|
headers: [
|
|
{
|
|
key: 'Cache-Control',
|
|
value: 'public, max-age=31536000, immutable',
|
|
},
|
|
],
|
|
},
|
|
{
|
|
source: '/_next/static/:path*',
|
|
headers: [
|
|
{
|
|
key: 'Cache-Control',
|
|
value: 'public, max-age=31536000, immutable',
|
|
},
|
|
],
|
|
},
|
|
// Content-Language Headers für jede Sprache (wichtig für Bing)
|
|
{
|
|
source: '/de/:path*',
|
|
headers: [
|
|
{
|
|
key: 'Content-Language',
|
|
value: 'de-DE',
|
|
},
|
|
],
|
|
},
|
|
{
|
|
source: '/en/:path*',
|
|
headers: [
|
|
{
|
|
key: 'Content-Language',
|
|
value: 'en-US',
|
|
},
|
|
],
|
|
},
|
|
{
|
|
source: '/sr/:path*',
|
|
headers: [
|
|
{
|
|
key: 'Content-Language',
|
|
value: 'sr-RS',
|
|
},
|
|
],
|
|
},
|
|
];
|
|
},
|
|
|
|
// Compiler-Optimierungen
|
|
compiler: {
|
|
removeConsole: process.env.NODE_ENV === 'production',
|
|
},
|
|
};
|
|
|
|
const withMDX = createMDX({
|
|
options: {
|
|
remarkPlugins: [],
|
|
rehypePlugins: [],
|
|
},
|
|
});
|
|
|
|
export default withNextIntl(withMDX(nextConfig));
|