ATlast — you'll never need to find your favorites on another platform again. Find your favs in the ATmosphere.
atproto
1[build]
2 command = "pnpm run build"
3 functions = "packages/functions/src"
4 publish = "packages/web/dist"
5
6[[redirects]]
7 from = "/oauth-client-metadata.json"
8 to = "/.netlify/functions/client-metadata"
9 status = 200
10
11[[redirects]]
12 from = "/oauth/callback"
13 to = "/.netlify/functions/oauth-callback"
14 status = 200
15
16[[headers]]
17 for = "/oauth-client-metadata.json"
18 [headers.values]
19 Access-Control-Allow-Origin = "*"
20 Cache-Control = "public, max-age=3600"
21
22[[headers]]
23 for = "/.well-known/*"
24 [headers.values]
25 Access-Control-Allow-Origin = "*"
26
27[[headers]]
28 for = "/*"
29 [headers.values]
30 X-Frame-Options = "DENY"
31 X-Content-Type-Options = "nosniff"
32 X-XSS-Protection = "1; mode=block"
33 Referrer-Policy = "strict-origin-when-cross-origin"
34 Permissions-Policy = "geolocation=(), microphone=(), camera=()"
35 Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://*.bsky.app https://*.bsky.network https://public.api.bsky.app; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests;"