GEO

.htaccess

@@ -0,0 +1,22 @@
+# === Force HTTPS ===
+RewriteEngine On
+RewriteCond %{HTTPS} off
+RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
+
+# === Redirect www to non-www ===
+RewriteCond %{HTTP_HOST} ^www\.amipro\.me$ [NC]
+RewriteRule ^(.*)$ https://amipro.me/$1 [L,R=301]
+
+# === Serve static robots.txt and sitemap.xml directly (bypass WordPress) ===
+RewriteRule ^robots\.txt$ /robots.txt [L]
+RewriteRule ^sitemap\.xml$ /sitemap.xml [L]
+RewriteRule ^llms\.txt$ /llms.txt [L]
+
+# === Security Headers ===
+<IfModule mod_headers.c>
+    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
+    Header always set X-Frame-Options "DENY"
+    Header always set X-Content-Type-Options "nosniff"
+    Header always set Referrer-Policy "strict-origin-when-cross-origin"
+    Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
+</IfModule>