mirror of
https://github.com/kremalicious/umami.git
synced 2024-11-15 09:45:04 +01:00
8732d056dd
* Initial Typescript models. * Re-add realtime data * get distinct sessions for session metrics * Add queries for new schema. * Fix Typo. * Add some api/team endpoints. * Fix destructure error. * Fix getWebsites call. * Ignore typescript build errors. * Fix enum issue. * add clickhouse route to deleteWebsite * Fix Website auth. * Updated lint-staged config. * Add permission checks. * Add user role api. * Fix error when updating website. * Fix isAdmin check. Fix Schema. * Initial conversion to react-basics. * Remove user/team transfer from website update. * delete website in relational query * Fix login secure token creation. * Add event type to event. * Allow user to be added to team with role. * Updated login form. * Add Role to TeamUser. * Add database migration. * Refactored permissions check. Updated redis lib. * Feat/um 114 roles and permissions (#1683) * Auth checkpoint. * Merge branch 'dev' into feat/um-114-roles-and-permissions * Add 02 migration. * Added lib/types. * Updated schema. * Updated roles and permissions logic. * Implement react-basics styles. Fix queries. * Update website details layout. * Add 01 migration. * Fix admin create. * Update react-basics. Co-authored-by: Francis Cao <franciscao@gmail.com> Co-authored-by: Mike Cao <mike@mikecao.com> Co-authored-by: Mike Cao <moocao@gmail.com>
75 lines
1.4 KiB
JavaScript
75 lines
1.4 KiB
JavaScript
require('dotenv').config();
|
|
const pkg = require('./package.json');
|
|
|
|
const contentSecurityPolicy = `
|
|
default-src 'self';
|
|
img-src *;
|
|
script-src 'self' 'unsafe-eval';
|
|
style-src 'self' 'unsafe-inline';
|
|
connect-src 'self' api.umami.is;
|
|
frame-ancestors 'self';
|
|
`;
|
|
|
|
const headers = [
|
|
{
|
|
key: 'X-DNS-Prefetch-Control',
|
|
value: 'on',
|
|
},
|
|
{
|
|
key: 'X-Frame-Options',
|
|
value: 'SAMEORIGIN',
|
|
},
|
|
{
|
|
key: 'Content-Security-Policy',
|
|
value: contentSecurityPolicy.replace(/\s{2,}/g, ' ').trim(),
|
|
},
|
|
];
|
|
|
|
if (process.env.FORCE_SSL) {
|
|
headers.push({
|
|
key: 'Strict-Transport-Security',
|
|
value: 'max-age=63072000; includeSubDomains; preload',
|
|
});
|
|
}
|
|
|
|
module.exports = {
|
|
env: {
|
|
currentVersion: pkg.version,
|
|
isProduction: process.env.NODE_ENV === 'production',
|
|
uiDisabled: !!process.env.DISABLE_UI,
|
|
},
|
|
basePath: process.env.BASE_PATH,
|
|
output: 'standalone',
|
|
eslint: {
|
|
ignoreDuringBuilds: true,
|
|
},
|
|
typescript: {
|
|
ignoreBuildErrors: true,
|
|
},
|
|
webpack(config) {
|
|
config.module.rules.push({
|
|
test: /\.svg$/,
|
|
issuer: /\.{js|jsx|ts|tsx}$/,
|
|
use: ['@svgr/webpack'],
|
|
});
|
|
|
|
return config;
|
|
},
|
|
async headers() {
|
|
return [
|
|
{
|
|
source: '/:path*',
|
|
headers,
|
|
},
|
|
];
|
|
},
|
|
async rewrites() {
|
|
return [
|
|
{
|
|
source: '/telemetry.js',
|
|
destination: '/api/scripts/telemetry',
|
|
},
|
|
];
|
|
},
|
|
};
|