SSG Deployment — Deploying Static Sites to CDNs and Hosting

# netlify.toml — Netlify configuration
[build]
    command = "npm run build"
    publish = "public"

[build.environment]
    NODE_VERSION = "18"

# Redirect and header rules
[[redirects]]
    from = "/blog/*"
    to = "/blog/:splat"
    status = 200

[[redirects]]
    from = "/*"
    to = "/404.html"
    status = 404

[[headers]]
    for = "/*"
    [headers.values]
        X-Frame-Options = "DENY"
        X-Content-Type-Options = "nosniff"
        Referrer-Policy = "strict-origin-when-cross-origin"

[[headers]]
    for = "/assets/*"
    [headers.values]
        Cache-Control = "public, max-age=31536000, immutable"

[[headers]]
    for = "/*.html"
    [headers.values]
        Cache-Control = "public, max-age=0, must-revalidate"

// vercel.json — Vercel configuration
{
    "buildCommand": "npm run build",
    "outputDirectory": "public",
    "framework": "nextjs",
    "regions": ["all"],
    "headers": [
        {
            "source": "/(.*)",
            "headers": [
                {
                    "key": "X-Content-Type-Options",
                    "value": "nosniff"
                },
                {
                    "key": "X-Frame-Options",
                    "value": "DENY"
                }
            ]
        },
        {
            "source": "/assets/(.*)",
            "headers": [
                {
                    "key": "Cache-Control",
                    "value": "public, max-age=31536000, immutable"
                }
            ]
        }
    ],
    "crons": [
        {
            "path": "/api/revalidate",
            "schedule": "0 */6 * * *"
        }
    ]
}

// scripts/deploy-s3.js — Deploy to S3 + CloudFront
const { S3Client, PutObjectCommand } = require('@aws-sdk/client-s3');
const { CloudFrontClient, CreateInvalidationCommand } = require('@aws-sdk/client-cloudfront');
const fs = require('fs');
const path = require('path');
const mime = require('mime-types');

const s3 = new S3Client({ region: process.env.AWS_REGION });
const cloudfront = new CloudFrontClient({ region: process.env.AWS_REGION });

const BUCKET = process.env.S3_BUCKET;
const DISTRIBUTION_ID = process.env.CLOUDFRONT_DISTRIBUTION_ID;
const BUILD_DIR = './public';

async function uploadFile(filePath, relativePath) {
    const content = fs.readFileSync(filePath);
    const contentType = mime.lookup(filePath) || 'application/octet-stream';

    const params = {
        Bucket: BUCKET,
        Key: relativePath,
        Body: content,
        ContentType: contentType,
        CacheControl: filePath.match(/\.(css|js|png|jpg|webp|avif)$/)
            ? 'public, max-age=31536000, immutable'
            : 'public, max-age=0, must-revalidate',
    };

    await s3.send(new PutObjectCommand(params));
    console.log(`Uploaded: ${relativePath}`);
}

async function uploadDirectory(dir) {
    const entries = fs.readdirSync(dir, { withFileTypes: true });

    for (const entry of entries) {
        const fullPath = path.join(dir, entry.name);
        const relativePath = path.relative(BUILD_DIR, fullPath);

        if (entry.isDirectory()) {
            await uploadDirectory(fullPath);
        } else {
            await uploadFile(fullPath, relativePath);
        }
    }
}

async function invalidateCache() {
    const params = {
        DistributionId: DISTRIBUTION_ID,
        InvalidationBatch: {
            CallerReference: `invalidate-${Date.now()}`,
            Paths: {
                Quantity: 1,
                Items: ['/*'],
            },
        },
    };

    await cloudfront.send(new CreateInvalidationCommand(params));
    console.log('CloudFront cache invalidated');
}

async function deploy() {
    console.log('Uploading to S3...');
    await uploadDirectory(BUILD_DIR);

    console.log('Invalidating CloudFront cache...');
    await invalidateCache();

    console.log('Deploy complete!');
}

deploy().catch(console.error);

# wrangler.toml — Cloudflare Pages configuration
name = "my-static-site"
compatibility_date = "2026-06-28"

[build]
    command = "npm run build"
    publish = "public"

[build.upload]
    format = "service-worker"

[[headers]]
    for = "/*"
    [headers.values]
        X-Frame-Options = "DENY"
        X-Content-Type-Options = "nosniff"

[[headers]]
    for = "/assets/*"
    [headers.values]
        Cache-Control = "public, max-age=31536000, immutable"