zeit now v2.json

{
  "version": 2,
  "regions": [
    "lhr1"
  ],
  "name": "xyz",
  "env": {
    "DBS": "postgres://user:password@host/db|schema.table",
  },
  "builds": [
    {
      "src": "/public/*/**",
      "use": "@now/static"
    },
    {
      "src": "/api/*.js",
      "use": "@now/node"
    },
    {
      "src": "/api/**/*.js",
      "use": "@now/node"
    }
  ],
  "headers": [
    {
      "source": "/(.*)",
      "headers": [
        {
          "key": "Access-Control-Allow-Origin",
          "value": "*"
        },
        {
          "key": "Access-Control-Allow-Headers",
          "value": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"
        },
        {
          "key": "Content-Security-Policy",
          "value": "default-src 'self'; base-uri 'self'; object-src 'self'; worker-src 'self' blob:; frame-src 'self' www.google.com www.gstatic.com; form-action 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net; font-src 'self' fonts.gstatic.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' www.google.com www.gstatic.com cdn.jsdelivr.net blob:; img-src 'self' api.ordnancesurvey.co.uk *.tile.openstreetmap.org api.mapbox.com res.cloudinary.com *.global.ssl.fastly.net cdn.jsdelivr.net data:"
        }
      ]
    }
  ],
  "trailingSlash": false,
  "rewrites": [
    {
      "source": "/",
      "destination": "/api/root.js"
    },
    {
      "source": "/view/:template",
      "destination": "/api/view.js"
    },
    {
      "source": "/api/provider/:provider",
      "destination": "/api/provider.js"
    },
    {
      "source": "/api/layer/mvt/:z/:x/:y",
      "destination": "/api/layer/mvt.js"
    },
    {
      "source": "/api/(.*)",
      "destination": "/api/$1.js"
    },
    {
      "source": "/(workspaces|views|css|js|icons|tabulator|codemirror)/(.*)",
      "destination": "/public/$1/$2"
    }
  ]
}