doneit-web/web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <system.webServer>
    <rewrite>
      <rules>
        <rule name="AngularRewrite" stopProcessing="true">
          <match url=".*" />
          <conditions logicalGrouping="MatchAll">
            <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
          </conditions>
          <action type="Rewrite" url="/" />
        </rule>
      </rules>
    </rewrite>
    <httpProtocol>
      <customHeaders>
        <!-- Iframe on the same host only -->
        <add name="X-Frame-Options" value="SAMEORIGIN" />
        <!-- HTTPS on -->
        <add name="Strict-Transport-Security" value="max-age=31536000" />
        <add name="Referrer-Policy" value="no-referrer" />
        <add name="X-Content-Type-Options" value="nosniff" />
        <!-- <add e="Expect-CT" value="enforce, max-age=86400" /> -->
        <!-- Permision -->
        <add name="Permissions-Policy" value="camera=(), microphone=()" />
        <!-- same origin only -->
        <add name="Cross-Origin-Embedder-Policy" value="require-corp" />
        <!-- same origin only -->
        <add name="Cross-Origin-Opener-Policy" value="same-origin" />
      </customHeaders>
    </httpProtocol>

  </system.webServer>
</configuration>