app.yaml

runtime: python312
entrypoint: gunicorn -b :$PORT main:app
default_expiration: 3h

handlers:

# Add longer caching for fonts
- url: /static/fonts/(.*\.(woff|woff2))$
  static_files: static/fonts/\1
  upload: static/fonts/.*\.(woff|woff2)$
  secure: always
  expiration: 365d
  http_headers:
    strict-transport-security: max-age=31556926; includeSubDomains
    x-content-type-options: nosniff
    vary: Accept-Encoding

# Set the UTF-8 charset for CSS and JS files.
# Makes the assumption that only CSS and JS files existing in the relevant dirs
# but avoids complex regexes
- url: /static/css
  static_dir: static/css
  secure: always
  http_headers:
    content-type: text/css; charset=utf-8
    strict-transport-security: max-age=31556926; includeSubDomains
    x-content-type-options: nosniff
    vary: Accept-Encoding
- url: /static/js
  static_dir: static/js
  secure: always
  http_headers:
    content-type: application/javascript; charset=utf-8
    strict-transport-security: max-age=31556926; includeSubDomains
    x-content-type-options: nosniff
    vary: Accept-Encoding

- url: /static
  static_dir: static
  secure: always
  http_headers:
    strict-transport-security: max-age=31556926; includeSubDomains
    x-content-type-options: nosniff
    vary: Accept-Encoding

- url: /.*
  script: auto
  secure: always