import type { NextConfig } from 'next'; // Security headers configuration const nextConfig: NextConfig = { output: 'standalone', images: { loader: 'custom', loaderFile: './lib/immichLoader.ts', }, async headers() { return [ { source: '/(.*)', headers: [ { key: 'X-Content-Type-Options', value: 'nosniff' }, { key: 'X-Frame-Options', value: 'DENY' }, { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }, { key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()', }, { key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains', }, { key: 'X-DNS-Prefetch-Control', value: 'off' }, ], }, ]; }, }; export default nextConfig;