[{"data":1,"prerenderedAt":175},["ShallowReactive",2],{"blog-blueprints/lovable-netlify":3},{"id":4,"title":5,"body":6,"category":155,"date":156,"dateModified":156,"description":157,"draft":158,"extension":159,"faq":160,"featured":158,"headerVariant":161,"image":160,"keywords":160,"meta":162,"navigation":163,"ogDescription":164,"ogTitle":160,"path":165,"readTime":166,"schemaOrg":167,"schemaType":168,"seo":169,"sitemap":170,"stem":171,"tags":172,"twitterCard":173,"__hash__":174},"blog/blog/blueprints/lovable-netlify.md","Lovable + Netlify Security Blueprint",{"type":7,"value":8,"toc":147},"minimark",[9,20,24,30,35,50,54,63,67,72,75,78,81,84,87,123,135],[10,11,12],"blueprint-summary",{},[13,14,15,19],"p",{},[16,17,18],"strong",{},"To secure a Lovable + Netlify deployment,"," you need to: (1) configure security headers via _headers or netlify.toml, (2) store all secrets in Netlify's dashboard, (3) use Netlify Functions for server-side operations with secret keys, and (4) use test credentials for deploy previews. This blueprint covers header configuration and environment management.",[21,22],"blueprint-meta",{"time":23},"1 hour",[25,26,27],"tldr",{},[13,28,29],{},"Deploying Lovable apps to Netlify requires configuration through _headers or netlify.toml. Configure environment variables in Netlify's dashboard, add security headers, and use Netlify Functions for any server-side operations that need secret keys.",[31,32,34],"h2",{"id":33},"part-1-netlify-security-headers","Part 1: Netlify Security Headers",[36,37,39],"code-block",{"label":38},"public/_headers",[40,41,46],"pre",{"className":42,"code":44,"language":45},[43],"language-text","/*\n  X-Frame-Options: DENY\n  X-Content-Type-Options: nosniff\n  Referrer-Policy: strict-origin-when-cross-origin\n  Permissions-Policy: camera=(), microphone=(), geolocation=()\n","text",[47,48,44],"code",{"__ignoreMap":49},"",[31,51,53],{"id":52},"part-2-netlify-environment-variables","Part 2: Netlify Environment Variables",[36,55,57],{"label":56},"Configure in Netlify Dashboard",[40,58,61],{"className":59,"code":60,"language":45},[43],"# Public (VITE_ prefix)\nVITE_SUPABASE_URL=https://xxx.supabase.co\nVITE_SUPABASE_ANON_KEY=eyJ...\n\n# Private (Functions only)\nSUPABASE_SERVICE_ROLE_KEY=eyJ...\n",[47,62,60],{"__ignoreMap":49},[31,64,66],{"id":65},"security-checklist","Security Checklist",[68,69,71],"h4",{"id":70},"netlify-deployment-checklist","Netlify Deployment Checklist",[13,73,74],{},"Security headers configured",[13,76,77],{},"Environment variables in dashboard",[13,79,80],{},"No hardcoded secrets in code",[13,82,83],{},"Server-side logic in Netlify Functions",[13,85,86],{},"Deploy previews use test credentials",[88,89,90,94,97],"stack-comparison",{},[31,91,93],{"id":92},"alternative-stack-options","Alternative Stack Options",[13,95,96],{},"Consider these related blueprints for different stack combinations:",[98,99,100,109,116],"ul",{},[101,102,103,108],"li",{},[104,105,107],"a",{"href":106},"/blog/blueprints/lovable-vercel","Lovable + Vercel"," - Alternative deployment platform",[101,110,111,115],{},[104,112,114],{"href":113},"/blog/blueprints/lovable-supabase","Lovable + Supabase"," - Backend integration guide",[101,117,118,122],{},[104,119,121],{"href":120},"/blog/blueprints/lovable-stripe","Lovable + Stripe"," - Deploy Stripe webhooks",[124,125,126,130],"related-articles",{},[127,128],"related-card",{"description":129,"href":106,"title":107},"Alternative deployment",[127,131],{"description":132,"href":133,"title":134},"Deep dive into Netlify","/blog/guides/netlify","Netlify Security Guide",[136,137,140,144],"cta-box",{"href":138,"label":139},"/","Start Free Scan",[31,141,143],{"id":142},"deploying-lovable-to-netlify","Deploying Lovable to Netlify?",[13,145,146],{},"Scan for configuration issues before going live.",{"title":49,"searchDepth":148,"depth":148,"links":149},2,[150,151,152,153,154],{"id":33,"depth":148,"text":34},{"id":52,"depth":148,"text":53},{"id":65,"depth":148,"text":66},{"id":92,"depth":148,"text":93},{"id":142,"depth":148,"text":143},"blueprints","2026-02-06","Security guide for deploying Lovable apps to Netlify. Configure environment variables, set up headers, secure functions, and protect your deployment.",false,"md",null,"purple",{"noindex":163},true,"Complete security configuration for deploying Lovable apps to Netlify.","/blog/blueprints/lovable-netlify","8 min read","[object Object]","Article",{"title":5,"description":157},{"loc":165},"blog/blueprints/lovable-netlify",[],"summary_large_image","8eQSR3moIoz8VD5qfOGk6ii7NF-XaSUc7krsdw2HPPI",1775843932181]