blog.ari.lt/netlify.toml
Ari Archer be640bd804
update @ Sun 22 Jan 17:00:54 EET 2023
Signed-off-by: Ari Archer <ari.web.xyz@gmail.com>
2023-01-22 17:00:54 +02:00

106 lines
2.4 KiB
TOML

[build]
command = "python3 ./scripts/blog.py static"
[[redirects]]
from = "/git/*"
to = "https://ari-web.xyz/gh/blog.ari-web.xyz/:splat"
status = 301
force = true
[[redirects]]
from = "/favicon.ico"
to = "https://ari-web.xyz/favicon.ico"
status = 200
force = true
[[redirects]]
from = "/robots.txt"
to = "https://ari-web.xyz/robots.txt"
status = 200
force = true
[[redirects]]
from = "/sitemap.xml"
to = "https://ari-web.xyz/sitemap.xml"
status = 200
force = true
[[redirects]]
from = "/blogs/:blog"
to = "https://legacy.blog.ari-web.xyz/blogs/:blog"
status = 301
force = true
[[redirects]]
from = "/c"
to = "https://user.ari-web.xyz/"
status = 301
force = true
[[redirects]]
from = "/netlify.toml"
to = "https://ari-web.xyz/404.blog.xyz"
status = 404
force = true
[[redirects]]
from = "/*"
to = "https://ari-web.xyz/404.blog.xyz"
status = 404
force = false
# Processing
[build.processing]
skip_processing = false
[build.processing.html]
pretty_urls = true
[build.processing.css]
bundle = true
minify = false
[build.processing.js]
bundle = false
minify = false
[build.processing.images]
compress = true
# --------------
# This has been replaced, currently I'm looking how
# JavaScript blocking is affecting my statistics
# as it seems like most people are much more interested
# in the legacy blog, not sure why, but it might have
# something to do with the content blocking features
# that is JavaScript blocking, even though both
# the legacy blog and the non-legacy blogs have JavaScript
# blocking
# Content-Security-Policy = "upgrade-insecure-requests; sandbox; script-src 'sha512-v'; object-src 'none';"
[[headers]]
for = "/blog.json"
[headers.values]
Access-Control-Allow-Origin = "*"
Access-Control-Allow-Methods = "GET"
[[headers]]
for = "/blog_json_hash.txt"
[headers.values]
Access-Control-Allow-Origin = "*"
Access-Control-Allow-Methods = "GET"
[[headers]]
for = "/*"
[headers.values]
Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
X-Frame-Options = "deny"
X-Content-Type-Options = "nosniff"
Content-Security-Policy = "upgrade-insecure-requests"
X-Permitted-Cross-Domain-Policies = "none"
Referrer-Policy = "no-referrer"