firebase.json

{
  "hosting": {
    "public": "build",
    "rewrites": [
      {
        "source": "/api/login",
        "function": "api"
      },
      {
        "source": "/api/auth",
        "function": "api"
      },
      {
        "source": "**",
        "function": "preRender"
      }
    ],
    "ignore": [
      "firebase.json",
      "**/.*",
      "**/node_modules/**"
    ],
    "headers": [{
      "source":"**",
      "headers": [
        {
          "key": "Access-Control-Allow-Origin",
          "value": "https://death.finance"
        },
        {
          "key": "Permissions-Policy",
          "value": "autoplay=(), camera=(), fullscreen=(), geolocation=(), microphone=()"
        },
        {
          "key": "Referrer-Policy",
          "value": "no-referrer"
        },
        {
          "key": "Strict-Transport-Security",
          "value": "max-age=63072000; includeSubDomains; preload"
        },
        {
          "key": "X-Content-Type-Options",
          "value": "nosniff"
        },
        {
          "key": "X-Frame-Options",
          "value": "DENY"
        },
        {
          "key": "X-XSS-protection",
          "value": "1; mode=block"
        },
        {
          "key": "Content-Security-Policy",
          "value": "connect-src 'self' https://us-central1-deathfinance.cloudfunctions.net https://us-central1-composeart-f9a7a.cloudfunctions.net https://firestore.googleapis.com https://api.opensea.io; default-src 'self'; font-src https://death.finance https://dev.death.finance https://wagdie.app; img-src 'self' https://storage.opensea.io https://lh3.googleusercontent.com https://storage.googleapis.com; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; upgrade-insecure-requests;"
        }
      ]
    }]
  }
}