static.json

{
  "root": "build",
  "clean_urls": true,
  "https_only": true,
  "routes": {
    "/**": "index.html"
  },
  "redirects": {
    "/robots.txt": {
      "url": "/robots.txt",
      "status": 404
    },
    "/sitemap.xml": {
      "url": "/sitemap.xml",
      "status": 404
    }
  },
  "headers": {
    "/**": {
      "Cache-Control": "no-store, no-cache, must-revalidate",
      "X-Frame-Options": "SAMEORIGIN",
      "X-Content-Type-Options": "nosniff",
      "X-XSS-Protection": "1; mode=block",
      "Referrer-Policy": "origin",
      "Content-Security-Policy": "default-src 'none'; connect-src 'self' https: wss:; media-src data:; script-src 'self' 'unsafe-eval' https:; font-src 'self' data:; img-src 'self' https: data:; style-src https: 'unsafe-inline'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https://auth.mozilla.auth0.com; base-uri 'none'; form-action 'none'",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains; always;"
    },
    "/*.*": {
      "Cache-Control": "public, max-age=31536000, immutable",
      "X-Frame-Options": "SAMEORIGIN",
      "X-Content-Type-Options": "nosniff",
      "X-XSS-Protection": "1; mode=block",
      "Referrer-Policy": "origin",
      "Content-Security-Policy": "default-src 'none'; connect-src 'self' https: wss://; media-src data:; script-src 'self' 'unsafe-eval' https:; font-src 'self' data:; img-src 'self' https: data:; style-src https: 'unsafe-inline'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https://auth.mozilla.auth0.com; base-uri 'none'; form-action 'none'",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains; always;"
    },
    "/index.html": {
      "Cache-Control": "no-store, no-cache, must-revalidate",
      "X-Frame-Options": "SAMEORIGIN",
      "X-Content-Type-Options": "nosniff",
      "X-XSS-Protection": "1; mode=block",
      "Referrer-Policy": "origin",
      "Content-Security-Policy": "default-src 'none'; connect-src 'self' https: wss://; media-src data:; script-src 'self' 'unsafe-eval' https:; font-src 'self' data:; img-src 'self' https: data:; style-src https: 'unsafe-inline'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https://auth.mozilla.auth0.com; base-uri 'none'; form-action 'none'",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains; always;"
    }
  }
}