23 lines
881 B
ApacheConf
23 lines
881 B
ApacheConf
# === Force HTTPS ===
|
|
RewriteEngine On
|
|
RewriteCond %{HTTPS} off
|
|
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
|
|
|
|
# === Redirect www to non-www ===
|
|
RewriteCond %{HTTP_HOST} ^www\.amipro\.me$ [NC]
|
|
RewriteRule ^(.*)$ https://amipro.me/$1 [L,R=301]
|
|
|
|
# === Serve static robots.txt and sitemap.xml directly (bypass WordPress) ===
|
|
RewriteRule ^robots\.txt$ /robots.txt [L]
|
|
RewriteRule ^sitemap\.xml$ /sitemap.xml [L]
|
|
RewriteRule ^llms\.txt$ /llms.txt [L]
|
|
|
|
# === Security Headers ===
|
|
<IfModule mod_headers.c>
|
|
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
|
|
Header always set X-Frame-Options "DENY"
|
|
Header always set X-Content-Type-Options "nosniff"
|
|
Header always set Referrer-Policy "strict-origin-when-cross-origin"
|
|
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
|
</IfModule>
|