_headers

# ============================================================
# EasyStack - Netlify Headers
# Security + caching best practices
# ============================================================

/*
  X-Frame-Options: DENY
  X-Content-Type-Options: nosniff
  Referrer-Policy: strict-origin-when-cross-origin
  Permissions-Policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  X-XSS-Protection: 1; mode=block
  Cache-Control: public, max-age=0, must-revalidate

# Long-cache immutable build assets
/images/*
  Cache-Control: public, max-age=31536000, immutable

/styles.css
/extra.css
/script.js
/extra.js
/hig.css
/hig.js
  Cache-Control: public, max-age=31536000, immutable

# Never cache the service worker
/service-worker.js
  Cache-Control: no-cache
  Service-Worker-Allowed: /