-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathnext.config.ts
More file actions
64 lines (58 loc) · 2.02 KB
/
Copy pathnext.config.ts
File metadata and controls
64 lines (58 loc) · 2.02 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
import type { NextConfig } from "next";
/**
* Next.js Configuration
*
* - `reactStrictMode`: Enables React strict mode for catching common bugs
* - `turbopack`: Configures Turbopack (used in `next dev --turbopack`)
* Maps Node built-ins to empty modules so Web Worker imports don't break
* in the browser bundle (same effect as webpack's `resolve.fallback: false`)
* - `webpack`: Equivalent fallback config kept for `next build` (Webpack)
*/
// Defense-in-depth headers for all routes — mic is still used via getUserMedia (user gesture + permission)
const securityHeaders = [
{ key: "X-Content-Type-Options", value: "nosniff" },
{ key: "X-Frame-Options", value: "DENY" },
{ key: "X-XSS-Protection", value: "1; mode=block" },
{ key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
// Feature policy: geolocation/camera disabled for embeds; recording uses prompt-based mic API
{ key: "Permissions-Policy", value: "camera=(), geolocation=()" },
];
const nextConfig: NextConfig = {
reactStrictMode: true,
async headers() {
return [
{
source: "/(.*)",
headers: securityHeaders,
},
{
// Cache static Next.js assets aggressively (they're content-hashed)
source: "/_next/static/(.*)",
headers: [
{
key: "Cache-Control",
value: "public, max-age=31536000, immutable",
},
],
},
];
},
// Turbopack config — used by `next dev --turbopack`
// Turbopack automatically stubs Node built-ins (fs, path, crypto) for
// browser bundles, so no explicit resolveAlias entries are needed here.
turbopack: {},
webpack: (config, { isServer }) => {
// Configure webpack to handle Web Worker imports for ML model inference
// Workers run heavy ML computations off the main thread
if (!isServer) {
config.resolve.fallback = {
...config.resolve.fallback,
fs: false,
path: false,
crypto: false,
};
}
return config;
},
};
export default nextConfig;