customHttp.yml

# Custom headers when serving docs through Amplify Hosting
#
# See: https://docs.aws.amazon.com/amplify/latest/userguide/custom-headers.html#setting-custom-headers
applications:
  - appRoot: docs
    customHeaders:
      - pattern: "**/*"
        headers:
          - key: "Strict-Transport-Security"
            value: "max-age=31536000; includeSubDomains"
          - key: "X-Frame-Options"
            value: "SAMEORIGIN"
          - key: "X-XSS-Protection"
            value: "1; mode=block"
          - key: "X-Content-Type-Options"
            value: "nosniff"
          # CSP set in _document.page.tsx meta tag
      - pattern: "flutter/**/*"
        headers:
          - key: "Cache-Control"
            value: "public, max-age=300"