<?php
return [
    'server' => '',
    'x-content-type-options' =>
    'nosniff',
    'x-download-options' => 'noopen',
    'x-frame-options' => 'sameorigin',
    'x-permitted-cross-domain-policies' =>
    'none', 'x-powered-by' => '',
    'x-xss-protection' => '1; mode=block',
    'referrer-policy' => 'no-referrer',
    'cross-origin-embedder-policy' =>
    'unsafe-none',
    'cross-origin-opener-policy' => 'unsafe-none',
    'cross-origin-resource-policy' => 'cross-origin',
    'clear-site-data' => [
        'enable' => false,
        'all' => false,
        'cache' => true,
        'cookies' => true,
        'storage' => true,
        'executionContexts' => true,
    ],
    'hsts' => [
        'enable' => true,
        'max-age' => 31536000,
        'include-sub-domains' => true,
        'preload' => true,
        'env' => 'https'
    ],
    'expect-ct' => [
        'enable' => false,
        'max-age' => 2147483648,
        'enforce' => false,
        'report-uri' => null,
    ],
    'permissions-policy' => [
        'enable' => true,
        'accelerometer' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        'autoplay' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        'camera' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'cross-origin-isolated' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'display-capture' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'encrypted-media' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'fullscreen' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'geolocation' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'gyroscope' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'magnetometer' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'microphone' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ], 'midi' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        'payment' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        'picture-in-picture' => [
            'none' => false,
            '*' => true,
            'self' => false,
            'origins' => [],
        ],
        'publickey-credentials-get' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        'screen-wake-lock' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        'sync-xhr' => [
            'none' => false,
            '*' => true,
            'self' => false,
            'origins' => [],
        ],
        'usb' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
        // 'web-share' => [
        //     'none' => false,
        //     '*' => false,
        //     'self' => true,
        //     'origins' => [],
        // ],
        'xr-spatial-tracking' => [
            'none' => false,
            '*' => false,
            'self' => true,
            'origins' => [],
        ],
    ], 'csp' => [
        'enable' => true,
        'report-only' => false,
        'report-to' => '',
        'report-uri' => [],
        'upgrade-insecure-requests' => true,
        'block-all-mixed-content' => false,
        'upgrade-insecure-requests' => false,
        'base-uri' => [
            'self' => true
        ],
        'child-src' => [],
        'connect-src' => [
            'self' => true,
            'allow' => [
                'cdn.tiny.cloud'
            ]
        ],
        'default-src' => [
            'self' => true
        ],
        'font-src' => [
            'self' => true,
            'allow' => [
                'https://cdn.jsdelivr.net',
                'https://fonts.gstatic.com',
                'https://fonts.googleapis.com'
            ]
        ],
        'form-action' => [
            'self' => true,
        ],
        'frame-ancestors' => [
            'self' => true,
            'allow' => [
                '*.google.com',
                '*.trenggalekkab.go.id'
            ]
        ],
        'frame-src' => [
            'self' => true,
            'allow' => [
                'https://www.google.com',
                'https://*.cdninstagram.com',
                '*.google.com',
                '*.trenggalekkab.go.id',
                '*'
            ]
        ],
        'img-src' => [
            'self' => true,
            'unsafe-eval' => true,
            'schemes' => [
                'data:'
            ],
            'allow' => [
                'sp.tinymce.com',
                'https://*.cdninstagram.com',
                '*.fbcdn.net',
                '*.trenggalekkab.go.id'
            ]
            
        ],
        'manifest-src' => [],
        'media-src' => [],
        'navigate-to' => [
            'unsafe-allow-redirects' => false,
        ],
        'object-src' => [
            'self' => true,
            'schemes' => [
                'data:'
            ],
            'unsafe-eval' => true
        ],
        'plugin-types' => [],
        'prefetch-src' => [],
        'require-trusted-types-for' => [
            'script' => false,
        ],
        'sandbox' => [
            'enable' => false,
            'allow-downloads-without-user-activation' => false,
            'allow-forms' => false,
            'allow-modals' => false,
            'allow-orientation-lock' => false,
            'allow-pointer-lock' => false,
            'allow-popups' => false,
            'allow-popups-to-escape-sandbox' => false,
            'allow-presentation' => false,
            'allow-same-origin' => false,
            'allow-scripts' => false,
            'allow-storage-access-by-user-activation' => false,
            'allow-top-navigation' => false,
            'allow-top-navigation-by-user-activation' => false,
        ],
        'script-src' => [
            'none' => false,
            'self' => true,
            'report-sample' => false,
            'allow' => [
                '*.responsivevoice.org',
                'code.jquery.com',
                'cdn.jsdelivr.net',
                'cdn.tiny.cloud',
                'npmcdn.com',
                '*.cloudflare.com'
            ],
            'schemes' => [],
            'unsafe-inline' => true,
            'unsafe-eval' => true,
            'unsafe-hashes' => true,
            'strict-dynamic' => false,
            'hashes' => [
                'sha256' => [],
                'sha384' => [],
                'sha512' => [],
            ],
        ], 
        'script-src-attr' => [],
        'script-src-elem' => [],
        'style-src' => [
            'self' => true,
            'unsafe-inline' => true,
            'unsafe-eval' => true,
            'allow' => [
                'https://fonts.gstatic.com',
                'https://cdn.jsdelivr.net',
                'https://fonts.googleapis.com',
                'http://w3.org',
                'cdn.tiny.cloud',
                '*.cloudflare.com'
            ],
            'data' => true
        ],
        'style-src-attr' => [],
        'style-src-elem' => [],
        'trusted-types' => [
            'enable' => false,
            'allow-duplicates' => false,
            'default' => false,
            'policies' => [],
        ],
        'worker-src' => [],
    ],
];
