netlify.toml

[build]
command = "hugo --gc --minify -b $URL"
publish = "public"

[build.environment]
HUGO_VERSION = "0.140.2"
HUGO_ENABLEGITINFO = "true"

[context.production.environment]
HUGO_ENV = "production"

[context.deploy-preview]
command = "hugo --gc --minify --buildFuture -b $DEPLOY_PRIME_URL"

[context.branch-deploy]
command = "hugo --gc --minify -b $DEPLOY_PRIME_URL"

[[headers]]
for = "/*"
[headers.values]
Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
Content-Security-Policy = '''
      default-src 'self' c.disquscdn.com disqus.com;
      connect-src 'self' www.google-analytics.com www.netlifystatus.com;
      font-src 'self' cdn.jsdelivr.net fonts.gstatic.com;
      frame-src 'self' www.google.com disqus.com identity.netlify.com;
      img-src 'self' blob: a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org cdnjs.cloudflare.com www.google-analytics.com data: c.disquscdn.com referrer.disqus.com wowchemy.com raw.githubusercontent.com s.gravatar.com www.gstatic.com;
      manifest-src 'self';
      script-src 'self' 'unsafe-inline' 'unsafe-eval' identity.netlify.com julenetxaniz.disqus.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com cdn.jsdelivr.net;
      style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com c.disquscdn.com;
      form-action 'none';
      frame-ancestors 'none';
      object-src 'none';
      base-uri 'none';
      upgrade-insecure-requests;
      report-uri https://julenetxaniz.report-uri.com/r/d/csp/enforce;
      report-to default'''
Report-To = '{"group":"default", "max_age":31536000, "endpoints":[{"url":"https://julenetxaniz.report-uri.com/a/d/g"}], "include_subdomains":true}'
NEL = '{"report_to":"default", "max_age":31536000, "include_subdomains":true}'
X-Frame-Options = "SAMEORIGIN"
X-XSS-Protection = "1; mode=block"
X-Content-Type-Options = "nosniff"
Referrer-Policy = "strict-origin-when-cross-origin"
Permissions-Policy = "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()"
Cross-Origin-Embedder-Policy-Report-Only = "require-corp; report-to='default'"
Cross-Origin-Opener-Policy-Report-Only = "same-origin; report-to='default'"
Cross-Origin-Resource-Policy = "same-site"

[[plugins]]
package = "netlify-plugin-hugo-cache-resources"
[plugins.inputs]
debug = true

[[plugins]]
package = "netlify-plugin-submit-sitemap"

[[plugins]]
package = "@netlify/plugin-lighthouse"

# to audit a path other than /
[[plugins.inputs.audits]]
path = "public"