app.yaml

runtime: python310
instance_class: F1

# disable automatic scaling to avoid incurring costs
automatic_scaling:
  target_cpu_utilization: 0.65
  min_instances: 0
  max_instances: 1
  min_pending_latency: 30ms  # default value
  max_pending_latency: automatic
  max_concurrent_requests: 50

# Reusable CSP header value via YAML anchor
x-csp: &csp >-
  default-src 'self';
  frame-src
    'self'
    edu.chainguard.dev
    https://app.qualified.com
    https://www.googletagmanager.com
    https://player.vimeo.com
    https://www.youtube.com
    https://www.youtube-nocookie.com
    https://platform.twitter.com
    https://syndication.twitter.com
    https://visualization-ui.chainguard.app
    https://terminal.inky.wtf
    www.google.com
    https://hcaptcha.com
    https://*.hcaptcha.com
    https://proxy.kapa.ai
    https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app
    https://www.google.com/recaptcha/
    https://recaptcha.google.com
    https://www.recaptcha.net;
  style-src
    'self'
    'unsafe-inline'
    edu.chainguard.dev
    https://tagmanager.google.com
    https://www.googletagmanager.com
    https://googletagmanager.com
    cdn.jsdelivr.net
    https://fonts.googleapis.com
    https://unpkg.com
    https://use.fontawesome.com
    https://hcaptcha.com
    https://*.hcaptcha.com;
  form-action 'self';
  font-src
    'self'
    edu.chainguard.dev
    https://fonts.googleapis.com
    https://fonts.gstatic.com
    https://cdn.jsdelivr.net
    https://use.fontawesome.com;
  script-src
    'self'
    'unsafe-inline'
    'unsafe-eval'
    edu.chainguard.dev
    https://www.google.com
    https://www.googletagmanager.com
    https://tagmanager.google.com
    https://googletagmanager.com
    *.googleapis.com
    cdn.jsdelivr.net
    *.googletagmanager.com
    https://www.google-analytics.com
    https://analytics.google.com
    https://snap.licdn.com
    https://unpkg.com
    https://csp.withgoogle.com
    https://play.google.com
    https://www.redditstatic.com
    http://js.hs-scripts.com
    https://tag.clearbitscripts.com
    https://j.6sc.co
    https://tracking.g2crowd.com
    https://tag.unifyintent.com
    https://static.reo.dev
    https://googleads.g.doubleclick.net
    https://js.qualified.com
    https://js.hscollectedforms.net
    https://js.hubspot.com
    https://js.hsadspixel.net
    https://js.hs-banner.com
    https://js.hs-analytics.net
    https://x.clearbitjs.com
    https://js.zi-scripts.com
    https://widget.kapa.ai
    www.google.com
    https://hcaptcha.com
    https://*.hcaptcha.com
    https://proxy.kapa.ai
    https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app
    https://www.gstatic.com
    https://www.recaptcha.net
    https://www.google.com/recaptcha/
    https://*.algolia.net
    https://*.algolianet.com;
  connect-src
    'self'
    https://www.googletagmanager.com
    https://tagmanager.google.com
    https://www.google.com
    https://stats.g.doubleclick.net
    https://googletagmanager.com
    *.google-analytics.com
    *.googletagmanager.com
    https://analytics.google.com
    https://region1.google-analytics.com
    https://www.google-analytics.com
    https://px.ads.linkedin.com
    https://px4.ads.linkedin.com
    https://storage.googleapis.com
    https://packages.wolfi.dev
    https://script.google.com
    https://script.googleusercontent.com
    https://csp.withgoogle.com
    https://play.google.com
    *.googleapis.com
    https://api.unifyintent.com
    https://api.reo.dev
    https://pixel-config.reddit.com
    https://www.redditstatic.com
    https://conversions-config.reddit.com
    https://ipv6.6sc.co
    https://static.hsappstatic.net
    https://app.qualified.com
    wss://ws6.qualified.com
    https://api.hubapi.com
    https://app.clearbit.com
    https://forms.hscollectedforms.net
    https://cta-service-cms2.hubspot.com
    https://js.zi-scripts.com
    https://ws.zoominfo.com
    https://x.clearbitjs.com
    https://js.hs-banner.com
    https://proxy.kapa.ai
    https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app
    https://metrics.kapa.ai
    https://hcaptcha.com
    https://*.hcaptcha.com
    https://widget.kapa.ai
    https://*.kapa.ai
    https://api.kapa.ai
    https://*.algolia.net
    https://*.algolianet.com
    https://*.algolia.io;
  img-src
    'self'
    'unsafe-inline'
    https://ssl.gstatic.com
    edu.chainguard.dev
    https://storage.googleapis.com
    https://www.googletagmanager.com
    https://googletagmanager.com
    https://www.google-analytics.com
    https://analytics.google.com
    https://px.ads.linkedin.com
    https://px4.ads.linkedin.com
    data:
    https://alb.reddit.com
    http://b.6sc.co
    https://forms.hsforms.com
    https://perf-na1.hsforms.com
    https://track.hubspot.com
    https://raw.githubusercontent.com;
  worker-src 'self' blob:;
  base-uri 'self';

# Reusable common HTTP headers via YAML anchor
x-common-headers: &common-headers
  X-Frame-Options: SAMEORIGIN
  X-Content-Type-Options: nosniff
  X-XSS-Protection: "0"
  Content-Security-Policy: *csp

handlers:
  - url: /(.*\.css)
    mime_type: text/css
    static_files: public/\1
    upload: public/(.*\.css)
    http_headers: *common-headers

  - url: /(.+)/
    static_files: public/\1/index.html
    upload: public/(.+)/index.html
    http_headers: *common-headers

  - url: /
    static_files: public/index.html
    upload: public/index.html
    http_headers: *common-headers

  - url: /([^\.]+)([^/])
    static_files: public/\1\2/index.html
    upload: public/(.+)
    http_headers: *common-headers

  - url: /(.+)
    static_files: public/\1
    upload: public/(.+)
    http_headers: *common-headers

error_handlers:
  - file: default_error.html