netlify.toml

[build]
  publish = "_site"
  functions = "functions"
  command = "yarn run build:pwa:optim"

[[headers]]
  for = "/*"
  [headers.values]
    X-Frame-Options = "DENY"
    X-XSS-Protection = "1; mode=block"
    Content-Security-Policy = "form-action https:"
    Referrer-Policy = "strict-origin-when-cross-origin"
    Strict-Transport-Security = "max-age=2592000"
    Feature-Policy = "vibrate 'none'; geolocation 'none'; midi 'none'; notifications 'none'; push 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'none'; fullscreen 'none'; payment 'none'"
[[headers]]
  for = "/assets/images/*"
  [headers.values]
    Cache-Control = "public, max-age=31536000, s-maxage=31536000, must-revalidate"
[[headers]]
  for = "/assets/icons/*"
  [headers.values]
    Cache-Control = "public, max-age=31536000, s-maxage=31536000, must-revalidate"
[[headers]]
  for = "/assets/*.css"
  [headers.values]
    Cache-Control = "public, max-age=31536000, s-maxage=31536000, must-revalidate"
[[headers]]
  for = "/assets/*.js"
  [headers.values]
    Cache-Control = "public, max-age=31536000, s-maxage=31536000, must-revalidate"
[[headers]]
  for = "/service-worker.js"
  [headers.values]
    Cache-Control = "public, max-age=31536000, s-maxage=31536000, must-revalidate"