[build]
  publish = "website/public"

[[redirects]]
  from = "/.well-known/openid-configuration"
  to = "https://id.alanpearce.eu/.well-known/openid-configuration"
  status = 302

[[headers]]
  for = "/*"
  [headers.values]
    x-content-type-options = "nosniff"
    x-xss-protection = "1; mode=block"
    referrer-policy = "strict-origin-when-cross-origin"
    strict-transport-security = "max-age=63072000; includeSubDomains; preload"
    cache-control = '''
      max-age=300,
      s-maxage=86400,
      state-while-revalidate
    '''
    content-security-policy = '''
      default-src 'none';
      img-src 'self' https://gc.zgo.at;
      object-src 'none';
      script-src 'self' https://gc.zgo.at;
      style-src
      'sha256-bGzdRsb1Yu6TLWwCqsdslYaNhLBikKOD6pFYeGsJ4lc='
      'sha256-dCSzNS1o8vygl80V2G2nPTiSOUNvyDnW+06hHS4ZdHQ=';
      form-action 'none';
      base-uri 'self';
      connect-src https://alanpearce-eu.goatcounter.com/count;
      frame-ancestors https://kagi.com;
'''