netlify.toml

[build]
  command = "hugo"
  publish = "build"

[[headers]]
  for = "/*"
  [headers.values]
    Content-Security-Policy = "upgrade-insecure-requests"
    Permissions-Policy = "camera=(), microphone=(), midi=()"
    Referrer-Policy = "no-referrer-when-downgrade"
    X-Content-Type-Options = "nosniff"
    X-Frame-Options = "SAMEORIGIN"
    X-XSS-Protection = "0"

[[headers]]
  for = "/*.css"
  [headers.values]
    Cache-Control = "public, s-max-age=64800"

[[headers]]
  for = "/*.ico"
  [headers.values]
    Cache-Control = "public, max-age=1604800, immutable"

[[headers]]
  for = "/fonts/*"
  [headers.values]
    Cache-Control = "public, max-age=604800, immutable"

[[headers]]
  for = "/img/*"
  [headers.values]
    Cache-Control = "public, max-age=1604800, immutable"

[[headers]]
  for = "/js/*"
  [headers.values]
    Cache-Control = "public, max-age=1604800, immutable"