GNX-WEB/frontEnd/next.config.js

/** @type {import('next').NextConfig} */
const nextConfig = {
  // Enable standalone output for optimized production deployment
  output: 'standalone',
  images: {
    // Disable image optimization - nginx serves images directly
    // This prevents 400 errors from Next.js trying to optimize relative URLs
    // Images are already optimized and served efficiently by nginx
    unoptimized: true,
    remotePatterns: [
      {
        protocol: 'http',
        hostname: 'localhost',
        port: '8000',
        pathname: '/media/**',
      },
      {
        protocol: 'https',
        hostname: 'localhost',
        port: '8000',
        pathname: '/media/**',
      },
      {
        protocol: 'http',
        hostname: 'localhost',
        port: '8080',
        pathname: '/images/**',
      },
      {
        protocol: 'https',
        hostname: 'localhost',
        port: '8080',
        pathname: '/images/**',
      },
      {
        protocol: 'https',
        hostname: 'images.unsplash.com',
        pathname: '/**',
      },
      // Production domain configuration
      {
        protocol: 'https',
        hostname: 'gnxsoft.com',
        pathname: '/media/**',
      },
      {
        protocol: 'https',
        hostname: 'gnxsoft.com',
        pathname: '/images/**',
      },
      {
        protocol: 'https',
        hostname: 'gnxsoft.com',
        pathname: '/_next/static/**',
      },
      {
        protocol: 'http',
        hostname: 'gnxsoft.com',
        pathname: '/media/**',
      },
      {
        protocol: 'http',
        hostname: 'gnxsoft.com',
        pathname: '/images/**',
      },
      {
        protocol: 'https',
        hostname: 'www.gnxsoft.com',
        pathname: '/media/**',
      },
      {
        protocol: 'https',
        hostname: 'www.gnxsoft.com',
        pathname: '/images/**',
      },
      {
        protocol: 'https',
        hostname: 'www.gnxsoft.com',
        pathname: '/_next/static/**',
      },
      {
        protocol: 'http',
        hostname: 'www.gnxsoft.com',
        pathname: '/media/**',
      },
      {
        protocol: 'http',
        hostname: 'www.gnxsoft.com',
        pathname: '/images/**',
      },
    ],
    // Legacy domains format for additional compatibility
    domains: ['images.unsplash.com', 'gnxsoft.com', 'www.gnxsoft.com'],
    formats: ['image/avif', 'image/webp'],
    deviceSizes: [640, 750, 828, 1080, 1200, 1920, 2048, 3840],
    imageSizes: [16, 32, 48, 64, 96, 128, 256, 384],
    minimumCacheTTL: 60,
  },
  sassOptions: {
    includePaths: ['./public/styles', './node_modules'],
    quietDeps: true, // Suppress deprecation warnings from dependencies
  },
  // Compiler optimizations
  compiler: {
    removeConsole: process.env.NODE_ENV === 'production' ? {
      exclude: ['error', 'warn'],
    } : false,
  },
  // Compression
  compress: true,
  // Production optimizations
  productionBrowserSourceMaps: false,
  // Performance optimizations (swcMinify removed - default in Next.js 15)
  // Enterprise Security Headers
  // NOTE: Most security headers are set in nginx to avoid duplicates
  // Only set headers here that are specific to Next.js or need to be in the app
  async headers() {
    return [
      {
        source: '/:path*',
        headers: [
          // Content Security Policy - Set here for Next.js compatibility
          // Note: Removed conflicting directives that are ignored with 'strict-dynamic'
          {
            key: 'Content-Security-Policy',
            value: process.env.NODE_ENV === 'production'
              ? "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com; frame-src 'self' https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests;"
              : "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: http://localhost:8000 http://localhost:8080; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' http://localhost:8000 https://www.google-analytics.com; frame-src 'self' https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self';"
          },
          // Hide X-Powered-By header from Next.js
          {
            key: 'X-Powered-By',
            value: ''
          },
        ],
      },
      // Static assets caching
      {
        source: '/images/:path*',
        headers: [
          {
            key: 'Cache-Control',
            value: 'public, max-age=31536000, immutable',
          },
        ],
      },
      {
        source: '/icons/:path*',
        headers: [
          {
            key: 'Cache-Control',
            value: 'public, max-age=31536000, immutable',
          },
        ],
      },
      // API responses - no cache for dynamic content
      {
        source: '/api/:path*',
        headers: [
          {
            key: 'Cache-Control',
            value: 'no-store, must-revalidate',
          },
        ],
      },
    ]
  },
  // Redirects for SEO
  async redirects() {
    return [
      // Redirect /about to /about-us
      {
        source: '/about',
        destination: '/about-us',
        permanent: true,
      },
      // Temporarily disabled - causing API issues
      // {
      //   source: '/((?!api/).*)+/',
      //   destination: '/$1',
      //   permanent: true,
      // },
    ]
  },
  // Rewrites for API proxy (Production: routes /api to backend through nginx)
  async rewrites() {
    // In development, proxy to Django backend
    if (process.env.NODE_ENV === 'development') {
      return [
        {
          source: '/api/:path*',
          destination: `${process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8000'}/api/:path*`,
        },
        {
          source: '/media/:path*',
          destination: `${process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8000'}/media/:path*`,
        },
      ]
    }
    // In production, add rewrite for media files so Next.js image optimization can access them
    // This allows Next.js to fetch media images from the internal backend during optimization
    return [
      {
        source: '/media/:path*',
        destination: `${process.env.INTERNAL_API_URL || 'http://127.0.0.1:1086'}/media/:path*`,
      },
    ]
  },
}

module.exports = nextConfig