[build] publish = "public" command = "zola build" [build.environment] # Set the version name that you want to use and Netlify will automatically use it. ZOLA_VERSION = "0.17.2" # The magic for deploying previews of branches. # We need to override the base url with whatever url Netlify assigns to our # preview site. We do this using the Netlify environment variable # `$DEPLOY_PRIME_URL`. [context.deploy-preview] command = "zola build --base-url $DEPLOY_PRIME_URL" [context.branch-deploy] command = "zola build --base-url $DEPLOY_PRIME_URL" [[headers]] for = "/*" [headers.values] X-Frame-Options = "DENY" X-Content-Type-Options = "nosniff" X-XSS-Protection = "1; mode=block" Referrer-Policy = "strict-origin-when-cross-origin" Strict-Transport-Security = "max-age=63072000; includeSubdomains" # To update the style-src value, run one of the following commands: # linux (coreutils) # cksum --algorithm sha256 --base64 < templates/style.css.html | cut -d' ' -f 4 # macOS (should also work on linux if xxd is installed) # shasum --algorithm 256 templates/style.css.html | cut -d' ' -f 1 | xxd -r -p | base64 # if nothing else works # openssl dgst -sha256 -binary < templates/style.css.html | openssl enc -base64 # and paste the output after sha256- Content-Security-Policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'sha256-wOE0zNBQWpUBcOQHPSvj7V8Ez3XVcJjNkSmw4Zp5pyA='; form-action 'none'; base-uri 'self'; frame-ancestors 'none'"