Stop serving JavaScript source maps

exposed-source-map

Source maps let anyone rebuild your original unminified code, comments and internal endpoint names included. Stop shipping them to production.

location ~* \.map$ {
    deny all;
    return 404;
}

// next.config.js
module.exports = {
  productionBrowserSourceMaps: false, // default
};

// nuxt.config.ts
export default defineNuxtConfig({
  sourcemap: { server: false, client: false },
});