next.config.mjs

import remarkGfm from "remark-gfm";
import nextra from "nextra";
import NextBundleAnalyzer from "@next/bundle-analyzer";

import * as redirects from "./lib/redirects.js";

const withBundleAnalyzer = NextBundleAnalyzer({
  enabled: process.env.ANALYZE === "true",
});

/**
 * CSP headers
 * img-src https to allow loading images from SSO providers
 */
const cspHeader =
  process.env.NODE_ENV === "production"
    ? `
  default-src 'self' https: wss:;
  script-src 'self' 'unsafe-eval' 'unsafe-inline' https:;
  style-src 'self' 'unsafe-inline' https:;
  img-src 'self' https: blob: data:;
  media-src 'self' https: blob: data:;
  font-src 'self' https:;
  frame-src 'self' https:;
  worker-src 'self' blob:;
  object-src 'none';
  base-uri 'self';
  form-action 'self';
  frame-ancestors 'none';
  upgrade-insecure-requests;
  block-all-mixed-content;
`
    : "";

// nextra config
const withNextra = nextra({
  theme: "nextra-theme-docs",
  themeConfig: "./theme.config.tsx",
  mdxOptions: {
    remarkPlugins: [remarkGfm],
  },
  defaultShowCopyCode: true,
});

// next config
const nextraConfig = withNextra({
  // Enable static export when STATIC_EXPORT env var is set
  ...(process.env.STATIC_EXPORT === "true" && {
    output: "export",
    trailingSlash: true,
    // Disable server-side features for static export
    distDir: "out",
  }),
  experimental: {
    scrollRestoration: true,
  },
  transpilePackages: ["react-tweet", "react-syntax-highlighter", "geist"],

  images: {
    // Disable image optimization for static export
    ...(process.env.STATIC_EXPORT === "true" && { unoptimized: true }),
    remotePatterns: [
      {
        protocol: "https",
        hostname: "static.langfuse.com",
        port: "",
        pathname: "/**",
      },
      {
        protocol: "https",
        hostname: "github.com",
        port: "",
        pathname: "/**",
      },
    ],
  },
  headers() {
    const headers = [
      {
        source: "/:path*",
        headers: [
          {
            key: "x-frame-options",
            value: "SAMEORIGIN",
          },
          {
            key: "X-Content-Type-Options",
            value: "nosniff",
          },
          {
            key: "Referrer-Policy",
            value: "strict-origin-when-cross-origin",
          },
          {
            key: "Permissions-Policy",
            value: "autoplay=*, fullscreen=*, microphone=*",
          },
        ],
      },
      {
        source: "/:path((?!api).*)*",
        headers: [
          {
            key: "Content-Security-Policy",
            value: cspHeader.replace(/\n/g, ""),
          },
        ],
      },
      // Mark markdown endpoints as noindex and ensure correct content type
      {
        source: "/:path*.md",
        headers: [
          { key: "X-Robots-Tag", value: "noindex" },
          { key: "Content-Type", value: "text/markdown; charset=utf-8" },
        ],
      },
    ];

    // Do not index Vercel preview deployments
    if (process.env.NEXT_PUBLIC_VERCEL_ENV === "preview") {
      headers.push({
        source: "/:path*",
        headers: [
          {
            key: "X-Robots-Tag",
            value: "noindex",
          },
        ],
      });
    }

    return headers;
  },
  redirects: async () => [
    ...redirects.nonPermanentRedirects.map(([source, destination]) => ({
      source,
      destination,
      permanent: false,
    })),
    ...redirects.permanentRedirects.map(([source, destination]) => ({
      source,
      destination,
      permanent: true,
    })),
  ],
  async rewrites() {
    // Serve any ".md" path by mapping to the static copy in public/md-src
    // Example: /docs.md -> /md-src/docs.md, /docs/observability/overview.md -> /md-src/docs/observability/overview.md
    return [
      {
        source: "/:path*.md",
        destination: "/md-src/:path*.md",
      },
    ];
  },
});

export default withBundleAnalyzer(nextraConfig);