network-priority.com/_headers at master · network-priority/network-priority.com · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# Cloudflare Pages HTTP response headers
# https://developers.cloudflare.com/pages/configuration/headers/

# ── Security headers on every response ─────────────────────────────────────
/*
  X-Content-Type-Options: nosniff
  X-Frame-Options: DENY
  Referrer-Policy: strict-origin-when-cross-origin
  Permissions-Policy: camera=(), microphone=(), geolocation=(), interest-cohort=()

# ── Immutable static assets (CSS / JS / images) — 1 year cache ─────────────
/assets/css/*
  Cache-Control: public, max-age=31536000, immutable

/assets/js/*
  Cache-Control: public, max-age=31536000, immutable

/assets/img/*
  Cache-Control: public, max-age=31536000, immutable

# ── PWA / manifest assets — 1 day ────────���─────────────────────────────────
/favicon.ico
  Cache-Control: public, max-age=86400

/manifest.json
  Cache-Control: public, max-age=86400

/sw.js
  Cache-Control: public, no-cache

# ── HTML pages — always revalidate ─────────────────────────────────────────
/*.html
  Cache-Control: public, max-age=0, must-revalidate

# ── Sitemap / robots — daily ────────────────────────────────────────────────
/sitemap.xml
  Cache-Control: public, max-age=86400

/robots.txt
  Cache-Control: public, max-age=86400