netlify.toml

[build]
  # Site is built by GitHub Actions, not Netlify.
  # Netlify only serves the pre-built files.
  publish = "_site/1-pct-treaty-impact"

[build.processing]
  skip_processing = false

# Headers for security and caching
[[headers]]
  for = "/*"
  [headers.values]
    X-Frame-Options = "SAMEORIGIN"
    X-XSS-Protection = "1; mode=block"
    X-Content-Type-Options = "nosniff"
    Referrer-Policy = "strict-origin-when-cross-origin"

[[headers]]
  for = "/*.html"
  [headers.values]
    Cache-Control = "public, max-age=0, must-revalidate"

[[headers]]
  for = "/assets/*"
  [headers.values]
    Cache-Control = "public, max-age=31536000, immutable"

# Root-level CSS/JS are NOT content-hashed (e.g. /styles.css, /book-overrides.css).
# Fresh 1hr, serve-stale-while-revalidating for 24hr. SCSS/CSS edits propagate
# within ~1hr everywhere without a revalidation roundtrip on repeat visitors.
# If a change is urgent, purge the Netlify+Cloudflare caches manually on deploy.
# Netlify's `*` does not cross `/`, so these rules only match root-level files —
# hashed assets under /site_libs/** keep Netlify's default long cache.
[[headers]]
  for = "/*.css"
  [headers.values]
    Cache-Control = "public, max-age=3600, stale-while-revalidate=86400"

[[headers]]
  for = "/*.js"
  [headers.values]
    Cache-Control = "public, max-age=3600, stale-while-revalidate=86400"

# Domain redirects - redirect old dih.earth domains to warondisease.org
[[redirects]]
  from = "https://impact.dih.earth/*"
  to = "https://impact.warondisease.org/:splat"
  status = 301
  force = true

[[redirects]]
  from = "https://models.dih.earth/*"
  to = "https://impact.warondisease.org/:splat"
  status = 301
  force = true

# Redirects for clean URLs
[[redirects]]
  from = "/index.html"
  to = "/"
  status = 301
  force = true

# 404 page
[[redirects]]
  from = "/*"
  to = "/404.html"
  status = 404

# Enable Pretty URLs (remove .html extension)
[build.processing.html]
  pretty_urls = true