mirror of
https://github.com/Silentely/eSIM-Tools.git
synced 2026-09-03 06:24:20 +08:00
dd27453c97
- 将二维码生成供应商从 api.qrserver.com 更新为 qrcode.show - 更新了相关文档、代码和测试中的二维码生成 URL - 调整了内容安全策略（CSP）以允许新的二维码生成 URL - 更新了 webpack 配置，为新的二维码生成 URL 添加缓存策略
123 lines
4.0 KiB
TOML
123 lines
4.0 KiB
TOML
[build]
|
||
# 构建命令
|
||
command = "npm run build --silent"
|
||
# 发布目录：使用项目根目录，直接提供现有 HTML（避免 dist 无 index.html 导致 404）
|
||
publish = "."
|
||
# Functions目录
|
||
functions = "netlify/functions"
|
||
# Edge Functions 目录
|
||
edge_functions = "netlify/edge-functions"
|
||
|
||
[build.environment]
|
||
# 固定 Node 版本，避免二进制依赖（如 sharp）在 Node 22 下编译耗时
|
||
NODE_VERSION = "20.12.2"
|
||
# 安装时减少无关输出与提示
|
||
NPM_FLAGS = "--no-audit --no-fund --omit=optional"
|
||
|
||
# 重定向和重写规则
|
||
[[redirects]]
|
||
# Giffgaff eSIM页面
|
||
from = "/giffgaff"
|
||
to = "/src/giffgaff/giffgaff_complete_esim.html"
|
||
status = 200
|
||
|
||
[[redirects]]
|
||
# Simyo eSIM页面
|
||
from = "/simyo"
|
||
to = "/src/simyo/simyo_complete_esim.html"
|
||
status = 200
|
||
|
||
|
||
|
||
[[redirects]]
|
||
# 根路径重定向到选择页面
|
||
from = "/"
|
||
to = "/index.html"
|
||
status = 200
|
||
|
||
# API代理重定向（用于解决CORS问题）
|
||
[[redirects]]
|
||
from = "/api/simyo/*"
|
||
to = "https://appapi.simyo.nl/simyoapi/api/v1/:splat"
|
||
status = 200
|
||
force = true
|
||
headers = {X-Forwarded-Host = "appapi.simyo.nl"}
|
||
|
||
[[headers]]
|
||
# 限制 Simyo 代理仅允许指定站点跨域访问
|
||
for = "/api/simyo/*"
|
||
[headers.values]
|
||
Access-Control-Allow-Origin = "https://esim.cosr.eu.org"
|
||
Access-Control-Allow-Headers = "Content-Type, Authorization"
|
||
Access-Control-Allow-Methods = "GET, POST, OPTIONS"
|
||
Vary = "Origin"
|
||
|
||
# 将 /bff/* 映射到 Edge Function bff-proxy
|
||
[[edge_functions]]
|
||
path = "/bff/*"
|
||
function = "bff-proxy"
|
||
|
||
[[redirects]]
|
||
from = "/api/giffgaff/*"
|
||
to = "https://api.giffgaff.com/:splat"
|
||
status = 200
|
||
force = true
|
||
headers = {X-Forwarded-Host = "api.giffgaff.com"}
|
||
|
||
[[headers]]
|
||
for = "/api/giffgaff/*"
|
||
[headers.values]
|
||
# giffgaff 直连不受此限制，保持通用放行
|
||
Access-Control-Allow-Origin = "*"
|
||
Access-Control-Allow-Headers = "Content-Type, Authorization"
|
||
Access-Control-Allow-Methods = "GET, POST, OPTIONS"
|
||
|
||
[[redirects]]
|
||
from = "/api/giffgaff-id/*"
|
||
to = "https://id.giffgaff.com/:splat"
|
||
status = 200
|
||
force = true
|
||
headers = {X-Forwarded-Host = "id.giffgaff.com"}
|
||
|
||
[[headers]]
|
||
for = "/api/giffgaff-id/*"
|
||
[headers.values]
|
||
Access-Control-Allow-Origin = "*"
|
||
Access-Control-Allow-Headers = "Content-Type, Authorization"
|
||
Access-Control-Allow-Methods = "GET, POST, OPTIONS"
|
||
|
||
[[redirects]]
|
||
from = "/api/giffgaff-public/*"
|
||
to = "https://publicapi.giffgaff.com/:splat"
|
||
status = 200
|
||
force = true
|
||
headers = {X-Forwarded-Host = "publicapi.giffgaff.com"}
|
||
|
||
[[headers]]
|
||
for = "/api/giffgaff-public/*"
|
||
[headers.values]
|
||
Access-Control-Allow-Origin = "*"
|
||
Access-Control-Allow-Headers = "Content-Type, Authorization"
|
||
Access-Control-Allow-Methods = "GET, POST, OPTIONS"
|
||
# 处理SPA路由（如果需要）
|
||
[[redirects]]
|
||
from = "/*"
|
||
to = "/index.html"
|
||
status = 404
|
||
|
||
# 安全头部
|
||
[[headers]]
|
||
for = "/*"
|
||
[headers.values]
|
||
X-Frame-Options = "DENY"
|
||
X-XSS-Protection = "1; mode=block"
|
||
X-Content-Type-Options = "nosniff"
|
||
Referrer-Policy = "strict-origin-when-cross-origin"
|
||
# 生产 CSP：移除 unsafe-inline，基于 nonce/hash 的策略（页面模板需注入 nonce）
|
||
# 如暂无模板注入机制，可先允许外链受信源并避免内联脚本
|
||
Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self' https://qrcode.show https://api.qrserver.com https://appapi.simyo.nl https://api.giffgaff.com https://id.giffgaff.com https://publicapi.giffgaff.com https://challenges.cloudflare.com; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; manifest-src 'self';"
|
||
|
||
[[headers]]
|
||
for = "/manifest.webmanifest"
|
||
[headers.values]
|
||
Content-Type = "application/manifest+json; charset=utf-8" |