blob: 36870ec4b3bc0bd51cb5e4128a49ba7b906b21fd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
|
RewriteEngine On
# If you migrate from wordpress this will keep your tags and categories working
# RewriteRule ^tag/(.*)$ https://www.REPLACEME.xyz/tags/$1/ [R=301,L]
# RewriteRule ^category/(.*)$ https://www.REPLACEME.xyz/categories/$1/ [R=301,L]
# Migrate old content
# RewriteRule ^my/old/(.*)$ https://www.REPLACEME.xyz/new/page/ [R=301,L]
# RewriteRule ^2018/10/old-blog-post/(.*)$ https://www.REPLACEME.xyz/2018/10/new-blog-post/ [R=301,L]
# SSL and www
# RewriteCond %{HTTPS} !on [OR]
# RewriteCond %{HTTP_HOST} !^www\.
# RewriteRule (.*) https://www.REPLACEME.xyz%{REQUEST_URI} [L,R=301]
# Create 404 error page in /layouts
ErrorDocument 404 /404.html
# Redirect Wordpress RSS feed URL to Hugo RSS feed URL
# RedirectMatch 301 (?i)^/feed/?(index.xml)?$ https://www.REPLACEME.xyz/index.xml
# HSTS
Header set Strict-Transport-Security "max-age=31536000"
# Block site from being framed with X-Frame-Options and CSP
# Header set Content-Security-Policy "frame-ancestors 'self';"
Header append X-Frame-Options: DENY
# Prevent browsers from incorrectly detecting non-scripts as scripts
Header append X-Content-Type-Options: nosniff
# Content Security Policy
# Don't implement the above policy yet; instead just report violations that would have occured
# Header set Content-Security-Policy-Report-Only: "default-src https: 'unsafe-eval' 'unsafe-inline' data:; img-src * data:; object-src 'none'; frame-src 'self' *.google.de google.de *.google.com google.com; font-src * https: data:; frame-ancestors 'self';"
Header set Content-Security-Policy: "default-src https: 'unsafe-eval' 'unsafe-inline' data:; img-src * data:; object-src 'none'; frame-src 'self' *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com *.google.de google.de *.google.com google.com; font-src * data:; frame-ancestors 'self';"
# Active GZIP compression
<IfModule mod_deflate.c>
SetOutputFilter DEFLATE
</IfModule>
<IfModule mod_headers.c>
Header append Cache-Control "public"
Header append Vary Accept-Encoding
Header set Connection keep-alive
Header unset ETag
FileETag None
# Because `mod_headers` cannot match based on the content-type,
# the following workaround needs to be used.
<FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ic[os]|jpe?g|m?js|json(ld)?|m4[av]|manifest|map|markdown|md|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
Header unset Content-Security-Policy
Header unset X-Content-Security-Policy
Header unset X-Frame-Options
Header unset X-UA-Compatible
Header unset X-WebKit-CSP
Header unset X-XSS-Protection
Header unset X-Content-Type-Options
</FilesMatch>
</IfModule>
# Browser Caching
<IfModule mod_expires.c>
ExpiresActive on
ExpiresDefault "access plus 1 month"
# DATA
ExpiresByType text/xml "access plus 0 seconds"
ExpiresByType text/html "access plus 0 seconds"
ExpiresByType text/plain "access plus 0 seconds"
ExpiresByType application/xml "access plus 0 seconds"
ExpiresByType application/json "access plus 0 seconds"
ExpiresByType application/rss+xml "access plus 1 hour"
ExpiresByType application/atom+xml "access plus 1 hour"
ExpiresByType text/x-component "access plus 1 hour"
# MANIFEST
ExpiresByType application/x-web-app-manifest+json "access plus 0 seconds"
ExpiresByType text/cache-manifest "access plus 0 seconds"
# SCRIPTS
ExpiresByType text/css "access plus 1 month"
ExpiresByType text/javascript "access plus 1 month"
ExpiresByType application/javascript "access plus 1 month"
ExpiresByType application/x-javascript "access plus 1 month"
# IMAGES
ExpiresByType image/gif "access plus 1 year"
ExpiresByType image/png "access plus 1 year"
ExpiresByType image/jpe "access plus 1 year"
ExpiresByType image/jpg "access plus 1 year"
ExpiresByType image/jpeg "access plus 1 year"
ExpiresByType image/jp2 "access plus 1 year"
ExpiresByType image/pipeg "access plus 1 year"
ExpiresByType image/bmp "access plus 1 year"
ExpiresByType image/tiff "access plus 1 year"
ExpiresByType image/svg+xml "access plus 1 year"
ExpiresByType image/vnd.microsoft.icon "access plus 1 year"
# ICONS
ExpiresByType image/ico "access plus 1 year"
ExpiresByType image/icon "access plus 1 year"
ExpiresByType text/ico "access plus 1 year"
ExpiresByType image/x-ico "access plus 1 year"
ExpiresByType image/x-icon "access plus 1 year"
ExpiresByType application/ico "access plus 1 year"
# AUDIO
ExpiresByType audio/ogg "access plus 1 year"
ExpiresByType audio/basic "access plus 1 year"
ExpiresByType audio/mid "access plus 1 year"
ExpiresByType audio/midi "access plus 1 year"
ExpiresByType audio/mpeg "access plus 1 year"
ExpiresByType audio/x-aiff "access plus 1 year"
ExpiresByType audio/x-mpegurl "access plus 1 year"
ExpiresByType audio/x-pn-realaudio "access plus 1 year"
ExpiresByType audio/x-wav "access plus 1 year"
# VIDEO
ExpiresByType video/ogg "access plus 1 year"
ExpiresByType video/mp4 "access plus 1 year"
ExpiresByType video/webm "access plus 1 year"
ExpiresByType video/x-msvideo "access plus 1 year"
ExpiresByType video/mpeg "access plus 1 year"
ExpiresByType video/quicktime "access plus 1 year"
ExpiresByType video/x-la-asf "access plus 1 year"
ExpiresByType video/x-ms-asf "access plus 1 year"
ExpiresByType x-world/x-vrml "access plus 1 year"
# FONTS
ExpiresByType font/truetype "access plus 1 year"
ExpiresByType font/opentype "access plus 1 year"
ExpiresByType application/x-font-ttf "access plus 1 year"
ExpiresByType application/x-font-woff "access plus 1 year"
ExpiresByType application/font-woff "access plus 1 year"
ExpiresByType application/vnd.ms-fontobject "access plus 1 year"
# FLASH
ExpiresByType application/x-shockwave-flash "access plus 1 year"
ExpiresByType video/x-flv "access plus 1 year"
# OTHERS
ExpiresByType application/pdf "access plus 1 year"
ExpiresByType image/vnd.wap.wbmp "access plus 1 year"
ExpiresByType application/vnd.wap.wbxml "access plus 1 year"
ExpiresByType application/smil "access plus 1 year"
<IfModule mod_headers.c>
Header append Cache-Control "public"
</IfModule>
</IfModule>
|
