ATlast — you'll never need to find your favorites on another platform again. Find your favs in the ATmosphere.
atproto
1[build]
2 command = "npm run build"
3 functions = "netlify/functions"
4 publish = "dist"
5
6[[redirects]]
7 from = "/oauth-client-metadata.json"
8 to = "/.netlify/functions/client-metadata"
9 status = 200
10
11[[redirects]]
12 from = "/oauth/callback"
13 to = "/.netlify/functions/oauth-callback"
14 status = 200
15
16[[headers]]
17 for = "/oauth-client-metadata.json"
18 [headers.values]
19 Access-Control-Allow-Origin = "*"
20 Cache-Control = "public, max-age=3600"
21
22[[headers]]
23 for = "/.well-known/*"
24 [headers.values]
25 Access-Control-Allow-Origin = "*"
26
27 [[headers]]
28 for = "/*"
29 [headers.values]
30 Content-Security-Policy = """
31 default-src 'self';
32 script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com;
33 style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
34 font-src 'self' https://fonts.gstatic.com;
35 img-src 'self' data: https:;
36 connect-src 'self' https://bsky.social https://*.bsky.network;
37 frame-ancestors 'none';
38 base-uri 'self';
39 form-action 'self';
40 """
41 X-Frame-Options = "DENY"
42 X-Content-Type-Options = "nosniff"
43 Referrer-Policy = "strict-origin-when-cross-origin"