netlify.toml

[context.deploy-preview.environment]
  VITE_GRAPHQL_ENDPOINT = "https://graphql-atomone-mainnet.allinbits.services/v1/graphql"
  VITE_CHAIN_ID         = "atomone-1"
  VITE_RPC              = "https://atomone-rpc.allinbits.com/"
  VITE_API              = "https://atomone-api.allinbits.com/"

[[redirects]]
  from = "/*"
  to = "/index.html"
  status = 200

[[headers]]
  for = "/*"
  [headers.values]
  Access-Control-Allow-Origin = '''
  https://gov.atom.one,
  https://graphql-atomone-mainnet.allinbits.services

  https://githubusercontent.com
  https://avatars.githubusercontent.com
  '''
  Strict-Transport-Security = "max-age=31536000; includeSubDomains"
  Content-Security-Policy = "default-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; script-src 'self' 'wasm-unsafe-eval'; object-src 'none'; img-src 'self' data: https:; connect-src https://graphql-atomone-mainnet.allinbits.services/v1/graphql https://atomone-rpc.allinbits.com https://plausible.io/api/event githubusercontent.com *.githubusercontent.com"
  X-Frame-Options = "SAMEORIGIN"
  X-Content-Type-Options = "nosniff"
  Referrer-Policy = "strict-origin"
  X-XSS-Protection = "1; mode=block"
  Set-Cookie = '''
  Secure, 
  SameSite'''
  permissions-policy = '''
  interest-cohort=(),
  accelerometer=(),
  autoplay=(),
  camera=(),
  autoplay=(),
  document-domain=(),
  encrypted-media=(),
  geolocation=(),
  gyroscope=(),
  magnetometer=(),
  microphone=(),
  midi=(),
  payment=(),
  usb=(),
  xr-spatial-tracking=()'''