Restrict nextjs Image to processor asssets

frontend/next.config.js

@@ -7,6 +7,7 @@ const {
 module.exports = async phase => {
   let meiliSearchOnlyKey = {}
   let imageDomains = []
+  // leaving out these steps for build and test phases
   if ([PHASE_DEVELOPMENT_SERVER, PHASE_PRODUCTION_SERVER].includes(phase)) {
     // the search-only api key gets generated by meili so we have to retrieve
     // it at runtime rather than use an env variable
@@ -19,14 +20,8 @@ module.exports = async phase => {
     meiliSearchOnlyKey = meiliKeys.results.find(
       key => key.actions.length === 1 && key.actions[0] === 'search',
     )
-
     imageDomains = [
-      // TODO: use a wildcard when https://github.com/vercel/next.js/pull/27345 get merged
-      `gitea.${process.env.KITSPACE_DOMAIN}`,
       new URL(process.env.KITSPACE_PROCESSOR_ASSET_URL).hostname,
-      'github.com',
-      'raw.githubusercontent.com',
-      'secure.gravatar.com',
     ]
   }
   /**