next.config.ts

import NextBundleAnalyzer from "@next/bundle-analyzer";
import dedent from "dedent";
import { type NextConfig } from "next";

const withBundleAnalyzer = NextBundleAnalyzer({
  enabled: process.env.ANALYZE === "true",
});

const config = {
  images: {
    formats: ["image/avif", "image/webp"],
    remotePatterns: [
      {
        protocol: "https",
        hostname: "images.ctfassets.net",
        port: "",
        search: "",
      },
      {
        protocol: "https",
        hostname: "image.thum.io",
        port: "",
        pathname: "/get/pdfSource/width/**",
        search: "",
      },
    ],
  },
  // eslint-disable-next-line @typescript-eslint/require-await -- headers must return a promise
  headers: async () => [
    {
      source: "/:path*",
      headers: [
        {
          key: "X-DNS-Prefetch-Control",
          value: "on",
        },
        {
          key: "Strict-Transport-Security",
          value: "max-age=63072000; includeSubDomains; preload",
        },
        {
          key: "X-XSS-Protection",
          value: "1; mode=block",
        },
        {
          key: "X-Frame-Options",
          value: "SAMEORIGIN",
        },
        {
          key: "Permissions-Policy",
          value: "camera=(), microphone=(), geolocation=()",
        },
        {
          key: "X-Content-Type-Options",
          value: "nosniff",
        },
        {
          key: "Referrer-Policy",
          value: "strict-origin-when-cross-origin",
        },
        {
          key: "Content-Security-Policy",
          value: dedent`
            default-src 'self';
            script-src 'self' 'unsafe-eval' 'unsafe-inline' va.vercel-scripts.com;
            style-src 'self' 'unsafe-inline';
            img-src 'self' images.ctfassets.net blob: data:;
            font-src 'self';
            object-src 'none';
            base-uri 'self';
            form-action 'self';
            frame-ancestors 'none';
            upgrade-insecure-requests;
          `.replaceAll("\n", ""),
        },
      ],
    },
  ],
  logging: { fetches: { fullUrl: true } },
  experimental: {
    typedEnv: true,
    reactCompiler: true,
    optimizePackageImports: ["@radix-ui/themes"],
  },
} satisfies NextConfig;

export default withBundleAnalyzer(config);