portabase/next.config.ts

import type { NextConfig } from "next";
import {PORTABASE_DEFAULT_SETTINGS} from "./portabase.config";


function buildCSPHeader(): string {
    const { CSP } = PORTABASE_DEFAULT_SETTINGS.SECURITY;

    const directives = [
        `default-src ${CSP.DEFAULT_SRC.join(" ")}`,
        `script-src ${CSP.SCRIPT_SRC.join(" ")}`,
        `style-src ${CSP.STYLE_SRC.join(" ")}`,
        `img-src ${CSP.IMG_SRC.join(" ")}`,
        `font-src ${CSP.FONT_SRC.join(" ")}`,
        `object-src ${CSP.OBJECT_SRC.join(" ")}`,
        `base-uri ${CSP.BASE_URI.join(" ")}`,
        `form-action ${CSP.FORM_ACTION.join(" ")}`,
        `frame-ancestors ${CSP.FRAME_ANCESTORS.join(" ")}`,
    ];

    if (CSP.BLOCK_ALL_MIXED_CONTENT) {
        directives.push("block-all-mixed-content");
    }

    if (CSP.UPGRADE_INSECURE_REQUESTS) {
        directives.push("upgrade-insecure-requests");
    }

    return directives.join("; ");
}

function buildPermissionsPolicy(): string {
    return Object.entries(PORTABASE_DEFAULT_SETTINGS.SECURITY.PERMISSIONS_POLICY)
        .map(([feature, values]) => `${feature}=${values.join(", ")}`)
        .join(", ");
}




const nextConfig: NextConfig = {
    output: "standalone",
    typescript: {
        ignoreBuildErrors: true,
    },
    eslint: {
        ignoreDuringBuilds: true,
    },
    compiler: {
        removeConsole: process.env.NODE_ENV === "production",
    },
    experimental: {
        nodeMiddleware: true,
    },
    async headers() {
        return [
            {
                source: "/(.*)",
                headers: [
                    {
                        key: "Content-Security-Policy",
                        value: buildCSPHeader(),
                    },
                    {
                        key: "Permissions-Policy",
                        value: buildPermissionsPolicy(),
                    },
                    {
                        key: 'X-Content-Type-Options',
                        value: 'nosniff',
                    },
                    {
                        key: 'X-Frame-Options',
                        value: 'DENY',
                    },
                    {
                        key: 'Referrer-Policy',
                        value: 'strict-origin-when-cross-origin',
                    },
                    // ...other security headers
                ],
            },
        ];
    },
};

export default nextConfig;