static.json

{
  "root": "build/",
  "https_only": false,
  "routes": {
    "/static/*": "/static/",
    "/**": "index.html"
  },
  "proxies": {
    "/api/": {
      "origin": "${API_URL}"
    }
  },
  "headers": {
    "/**": {
      "Cache-Control": "no-store, no-cache",
      "X-Content-Type-Options": "nosniff",
      "X-Frame-Options": "deny",
      "X-XSS-Protection": "1; mode=block"
    },
    "/static/**": {
      "Cache-Control": "public, max-age=31536000"
    },
    "/index.html": {
      "Cache-Control": "must_revalidate, public, max-age=3600"
    },
    "/api/**": {
      "Cache-Control": "no-cache, must-revalidate",
      "Expires": "-1",
      "Access-Control-Allow-Origin": "*",
      "Access-Control-Allow-Methods": "POST, GET, OPTIONS",
      "Access-Control-Allow-Headers": "Content-Type",
      "Access-Control-Max-Age": 600
    }
  }
}