netlify.toml

# https://www.netlify.com/docs/netlify-toml-reference/
[build]
  base = "./"
  command = "npm run build"
  [build.environment]
    GIT_LFS_ENABLED = "1"
[[headers]]
  for="/*"
  [headers.values]
    # Link = '''
    #   </css/styles/index.min.css>; rel=preload; as=style, \
    #   </css/js/index.min.js>; rel=preload; as=script, \
    #   </img/icons.svg>; rel=preload; as=image
    # '''
    X-Frame-Options = "DENY"
    X-XSS-Protection = "1; mode=block"
    X-Content-Type-Options = "nosniff"
    Referrer-Policy = "no-referrer-when-downgrade"
    Strict-Transport-Security = "max-age=31536000"
    Content-Security-Policy = '''
      default-src 'self';
      img-src *;
      script-src 'self' https://cdn.kernvalley.us https://polyfill.io/v3/ https://unpkg.com/@webcomponents/custom-elements@1.3.2/ https://www.googletagmanager.com https://www.google-analytics.com/analytics.js  'sha256-uv9ihhWV1/99Lna4PlyzJ4Ji2ofiXKU9ak+GUXMN0gw=' 'sha256-YCSlybv0BJeWnGWF8JCyQMs1TUOxVjFyr5upfHiDysc=' 'sha256-YmEu57ZRfDpDDhMApyHsyE3PA6DSf2V+9bIVooFPFHw=';
      style-src 'self' 'unsafe-inline' https://cdn.kernvalley.us https://www.youtube.com;
      connect-src 'self' https://baconipsum.com/api/ https://cdn.kernvalley.us https://b5774ac5-2d54-4d4a-953f-4d91327b9cf9.kernvalley.us https://api.kernvalley.us https://polyfill.io/v3/ https://unpkg.com/@webcomponents/custom-elements@1.3.2/;
      font-src 'self' https://cdn.kernvalley.us;
      media-src *;
      child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com;
      block-all-mixed-content;
      upgrade-insecure-requests;
      disown-opener;
      reflected-xss block;
      manifest-src 'self';
      form-action 'self';'''
# [[redirects]]
  # from = ""
  # to = ""