30 lines
702 B
TypeScript
30 lines
702 B
TypeScript
import type { NextConfig } from "next";
|
||
|
||
import { nonCspSecurityHeaders } from "./src/lib/csp-config";
|
||
import { parseAllowedDevOrigins } from "./src/lib/next-dev-origins";
|
||
|
||
const allowedDevOrigins = parseAllowedDevOrigins(process.env.ALLOWED_DEV_ORIGINS);
|
||
|
||
const nextConfig: NextConfig = {
|
||
output: "standalone",
|
||
allowedDevOrigins,
|
||
reactCompiler: true,
|
||
|
||
images: {
|
||
unoptimized: true,
|
||
deviceSizes: [640, 750, 828, 1080, 1200, 1920],
|
||
},
|
||
|
||
// 非 CSP 安全头；CSP 由 middleware 按后台接入站点白名单动态生成。
|
||
async headers() {
|
||
return [
|
||
{
|
||
source: "/:path*",
|
||
headers: nonCspSecurityHeaders,
|
||
},
|
||
];
|
||
},
|
||
};
|
||
|
||
export default nextConfig;
|