static.json

{
  "root": "build",
  "clean_urls": true,
  "https_only": true,
  "routes": {
    "/**": "index.html"
  },
  "redirects": {
    "/robots.txt": {
      "url": "/robots.txt",
      "status": 404
    },
    "/sitemap.xml": {
      "url": "/sitemap.xml",
      "status": 404
    }
  },
  "headers": {
    "/**": {
      "Cache-Control": "no-store, no-cache, must-revalidate",
      "X-Frame-Options": "SAMEORIGIN",
      "X-Content-Type-Options": "nosniff",
      "X-XSS-Protection": "1; mode=block",
      "Referrer-Policy": "origin",
      "Content-Security-Policy": "frame-ancestors 'self'",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains; always;"
    },
    "/*.*": {
      "Cache-Control": "public, max-age=31536000, immutable",
      "X-Frame-Options": "SAMEORIGIN",
      "X-Content-Type-Options": "nosniff",
      "X-XSS-Protection": "1; mode=block",
      "Referrer-Policy": "origin",
      "Content-Security-Policy": "frame-ancestors 'self'",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains; always;"
    },
    "/index.html": {
      "Cache-Control": "no-store, no-cache, must-revalidate",
      "X-Frame-Options": "SAMEORIGIN",
      "X-Content-Type-Options": "nosniff",
      "X-XSS-Protection": "1; mode=block",
      "Referrer-Policy": "origin",
      "Content-Security-Policy": "frame-ancestors 'self'",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains; always;"
    }
  }
}