What's the correct REGEX for the allowlist in app.yml?

Looks more or less right. You may want to escape .s though and add ^ and $