Nudgeer Safe
One-click security headers for SSR frameworks
Install the package
npm i @onboardbase/nudgeer-safe
yarn add @onboardbase/nudgeer-safe
NextJS
In NextJS configuration file
/** @type {import('next').NextConfig} */
import NudgeerSafe from '@onboardbase/nudgeer-safe'
const nextConfig = {
headers: async ()=> {
return await nudgeerSafe({includeConfig:true,path:"/*"}).next()
}
//... rest of config
};
module.exports = nextConfig;NuxtJS
// https://nuxt.com/docs/api/configuration/nuxt-config
import NudgeerSafe from '@onboardbase/nudgeer-safe'
export default defineNuxtConfig({
devtools: { enabled: true },
routeRules:{
'/**':{
headers: new NudgeerSafe().nuxt()
},
}
})AstroJS
import { defineConfig } from 'astro/config';
import node from '@astrojs/node'
import tailwind from "@astrojs/tailwind";
import NudgeerSafe from '@onboardbase/nudgeer-safe'
const headers = new NudgeerSafe().astro()
export default defineConfig({
output:'server',
server:{
headers: headers
},
adapter:node({
mode: 'standalone',
}),
integrations: [tailwind()]
});For more frameworks see docs
Advanced Usage
Create a nudgeer.json in the root directory
{
"version":"1.0",
"detatch":true, // default false
"path":"/:path*",
"paths":{
"/:path*":{
"headers":[
{
"key":"content-security-policy",
"value":"default-src 'self'"
},
{
"key":"referrer-policy",
"value":"origin"
},
{
"key":"x-content-type-options",
"value":"nosniff"
}
]
},
"/:api*":{
"headers":[
{
"key":"content-security-policy",
"value":"default-src 'self'"
},
{
"key":"referrer-policy",
"value":"origin"
},
{
"key":"x-content-type-options",
"value":"nosniff"
}
]
}
}
}
Supported
- [x] NextJs
- [x] AstroJs
- [x] NuxtJs