next.config.ts

import path from 'node:path'
import { appEnvConfig } from '@packages/lib/config'
import type { AppEnvInterface } from '@packages/lib/types'
import type { NextConfig } from 'next'

const appConfig: AppEnvInterface = appEnvConfig('web')
const isProduction = appConfig.env.nodeEnv === 'production'
const nextConfig: NextConfig = {
	transpilePackages: ['@packages/lib', '@packages/drizzle'],
	turbopack: {
		root: path.join(__dirname, '../..'),
	},
	// TODO: Fix React module resolution for packages/lib in monorepo type-check
	typescript: {
		ignoreBuildErrors: true,
	},
	experimental: {
		mdxRs: true,
		optimizePackageImports: ['react-icons'],
	},
	serverExternalPackages: [
		'@packages/lib/stellar',
		'@packages/lib/passkey',
		'@packages/lib/db',
		'@packages/lib/supabase-server',
	],
	images: {
		remotePatterns: [
			{
				protocol: isProduction ? 'https' : 'http',
				hostname: new URL(appConfig.database.url).hostname || '127.0.0.1',
				port: appConfig.database.port || '54321',
				pathname: '/storage/v1/object/public/project_thumbnails/**',
			},
			{
				protocol: 'https',
				hostname: '*.supabase.co',
				pathname: '/storage/v1/object/public/**',
			},
			{
				protocol: 'https',
				hostname: 'randomuser.me',
				pathname: '/api/portraits/**',
			},
			{
				protocol: 'https',
				hostname: '*.mypinata.cloud',
				pathname: '/ipfs/**',
			},
		],
	},
	async headers() {
		// Apply headers for both production and development
		const connectSrc = isProduction
			? `'self' https://flagcdn.com https://apis.google.com https://friendbot-futurenet.stellar.org https://www.google-analytics.com https://www.googletagmanager.com https://rpc-futurenet.stellar.org https://horizon-futurenet.stellar.org https://soroban-testnet.stellar.org https://horizon-testnet.stellar.org https://*.kindfi.org https://dev-api.dashboard.kindfi.org https://*.supabase.co https://*.vercel.app https://dev.api.trustlesswork.com https://api.trustlesswork.com`
			: `'self' https://friendbot-futurenet.stellar.org http://localhost:* http://127.0.0.1:* https://localhost:* https://127.0.0.1:* https://flagcdn.com https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com https://rpc-futurenet.stellar.org https://horizon-futurenet.stellar.org https://soroban-testnet.stellar.org https://horizon-testnet.stellar.org https://*.kindfi.org https://dev-api.dashboard.kindfi.org https://*.supabase.co https://*.vercel.app https://dev.api.trustlesswork.com https://api.trustlesswork.com`

		if (isProduction) {
			return [
				{
					source: '/:path*',
					headers: [
						{
							key: 'X-Frame-Options',
							value: 'SAMEORIGIN',
						},
						{
							key: 'X-Content-Type-Options',
							value: 'nosniff',
						},
						{
							key: 'Strict-Transport-Security',
							value: 'max-age=31536000; includeSubDomains; preload',
						},
						{
							key: 'Content-Security-Policy',
							value: `
                default-src 'self';
                script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://www.googletagmanager.com;
                style-src 'self' 'unsafe-inline';
                img-src 'self' data: blob: https://flagcdn.com https://*.jsdelivr.net https://cdn.jsdelivr.net https://unpkg.com https://*.unpkg.com https://raw.githubusercontent.com https://*.githubusercontent.com https://freighter.app https://albedo.link https://rabet.io https://xbull.app https://walletconnect.org https://*.walletconnect.org https://*.walletconnect.com https://stellar.creit.tech https://*.mypinata.cloud;
                font-src 'self' data:;
                connect-src ${connectSrc};
								frame-src 'self' https://www.youtube.com;
                frame-ancestors 'self';
                upgrade-insecure-requests;
              `.replace(/\s{2,}/g, ' '),
						},
						{
							key: 'Referrer-Policy',
							value: 'strict-origin-when-cross-origin',
						},
						{
							key: 'X-XSS-Protection',
							value: '1; mode=block',
						},
					],
				},
			]
		}
		// Apply more permissive headers for development
		return [
			{
				source: '/:path*',
				headers: [
					{
						key: 'X-Content-Type-Options',
						value: 'nosniff',
					},
					{
						key: 'Content-Security-Policy',
						value: `
                default-src 'self';
                script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://www.googletagmanager.com;
                style-src 'self' 'unsafe-inline';
                img-src 'self' data: blob: https://flagcdn.com https://randomuser.me http://127.0.0.1:54321 https://*.jsdelivr.net https://cdn.jsdelivr.net https://unpkg.com https://*.unpkg.com https://raw.githubusercontent.com https://*.githubusercontent.com https://freighter.app https://albedo.link https://rabet.io https://xbull.app https://walletconnect.org https://*.walletconnect.org https://*.walletconnect.com https://stellar.creit.tech https://*.mypinata.cloud;
                font-src 'self' data:;
                connect-src ${connectSrc};
								frame-src 'self' https://www.youtube.com;
                frame-ancestors 'self';
              `.replace(/\s{2,}/g, ' '),
					},
				],
			},
		]
	},
}

module.exports = nextConfig