netlify.toml

# Netlify configuration for the BRRR Calculator (static site)

[build]
  publish = "public"
  command = ""

# Security + cost-control headers applied to every response
[[headers]]
  for = "/*"
  [headers.values]
    X-Frame-Options = "SAMEORIGIN"
    X-Content-Type-Options = "nosniff"
    Referrer-Policy = "strict-origin-when-cross-origin"
    Permissions-Policy = "geolocation=(), microphone=(), camera=()"
    # Cache static assets for a year (they are immutable per deploy)
    Cache-Control = "public, max-age=3600"

# Long cache for fingerprinted assets if you add hashing later
[[headers]]
  for = "/*.css"
  [headers.values]
    Cache-Control = "public, max-age=86400"

[[headers]]
  for = "/*.js"
  [headers.values]
    Cache-Control = "public, max-age=86400"