website/.htaccess
2017-11-06 22:45:23 +01:00

40 lines
1.6 KiB
ApacheConf

AddDefaultCharset utf-8
FileETag MTime Size
ServerSignature Off
SetEnvIf Host ^ suppress-error-charset
<filesMatch ".(css|png|svg)$">
Header set Cache-Control "public, max-age=604800"
</filesMatch>
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://kaboom.pw/$1 [R=301,L]
RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ https://kaboom.pw/$1 [R=301,L]
RewriteCond %{HTTP_HOST} ^flame.ga$
RewriteRule ^(.*)$ https://kaboom.pw/$1 [R=301,L]
RewriteCond %{HTTP_HOST} ^www.flame.ga$
RewriteRule ^(.*)$ https://kaboom.pw/$1 [R=301,L]
ErrorDocument 403 https://kaboom.pw/
ErrorDocument 404 https://kaboom.pw/
AddOutputFilterByType DEFLATE text/plain
AddOutputFilterByType DEFLATE text/html
AddOutputFilterByType DEFLATE text/xml
AddOutputFilterByType DEFLATE text/css
AddOutputFilterByType DEFLATE application/xml
AddOutputFilterByType DEFLATE application/xhtml+xml
AddOutputFilterByType DEFLATE application/rss+xml
AddOutputFilterByType DEFLATE application/javascript
AddOutputFilterByType DEFLATE application/x-javascript
Header set Cache-Control "public, max-age=0, must-revalidate"
Header set Content-Security-Policy "connect-src 'none'; default-src 'none'; font-src data:; frame-src 'none'; img-src 'none'; media-src 'none'; object-src 'none'; script-src 'none'; style-src 'self'"
Header set Referrer-Policy "no-referrer"
Header set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"
Header set Vary "Accept-Encoding"
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "DENY"
Header set X-Xss-Protection "1; mode=block"