2012-11-09 13:30:07 +01:00
|
|
|
<IfModule mod_headers.c>
|
2015-08-11 10:55:57 +02:00
|
|
|
<IfModule mod_setenvif.c>
|
|
|
|
<IfModule mod_fcgid.c>
|
2015-03-26 15:30:00 +01:00
|
|
|
SetEnvIfNoCase ^Authorization$ "(.+)" XAUTHORIZATION=$1
|
|
|
|
RequestHeader set XAuthorization %{XAUTHORIZATION}e env=XAUTHORIZATION
|
|
|
|
</IfModule>
|
2015-08-11 10:55:57 +02:00
|
|
|
<IfModule mod_proxy_fcgi.c>
|
|
|
|
SetEnvIfNoCase Authorization "(.+)" HTTP_AUTHORIZATION=$1
|
|
|
|
</IfModule>
|
2015-03-26 15:30:00 +01:00
|
|
|
</IfModule>
|
|
|
|
|
|
|
|
<IfModule mod_env.c>
|
|
|
|
# Add security and privacy related headers
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
# Avoid doubled headers by unsetting headers in "onsuccess" table,
|
|
|
|
# then add headers to "always" table: https://github.com/nextcloud/server/pull/19002
|
|
|
|
Header onsuccess unset Referrer-Policy
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set Referrer-Policy "no-referrer"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
Header onsuccess unset X-Content-Type-Options
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set X-Content-Type-Options "nosniff"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
Header onsuccess unset X-Download-Options
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set X-Download-Options "noopen"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
Header onsuccess unset X-Frame-Options
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set X-Frame-Options "SAMEORIGIN"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
Header onsuccess unset X-Permitted-Cross-Domain-Policies
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set X-Permitted-Cross-Domain-Policies "none"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
Header onsuccess unset X-Robots-Tag
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set X-Robots-Tag "none"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
|
|
|
Header onsuccess unset X-XSS-Protection
|
2019-07-01 18:41:59 +02:00
|
|
|
Header always set X-XSS-Protection "1; mode=block"
|
2020-01-19 16:53:08 +01:00
|
|
|
|
2015-03-26 15:30:00 +01:00
|
|
|
SetEnv modHeadersAvailable true
|
|
|
|
</IfModule>
|
|
|
|
|
2016-08-08 17:39:53 +02:00
|
|
|
# Add cache control for static resources
|
2016-11-11 13:10:35 +01:00
|
|
|
<FilesMatch "\.(css|js|svg|gif)$">
|
|
|
|
Header set Cache-Control "max-age=15778463"
|
|
|
|
</FilesMatch>
|
2017-12-16 12:48:05 +01:00
|
|
|
|
2016-11-11 13:10:35 +01:00
|
|
|
# Let browsers cache WOFF files for a week
|
2018-11-18 11:02:20 +01:00
|
|
|
<FilesMatch "\.woff2?$">
|
2016-11-11 13:10:35 +01:00
|
|
|
Header set Cache-Control "max-age=604800"
|
2015-03-26 15:30:00 +01:00
|
|
|
</FilesMatch>
|
2012-11-09 13:30:07 +01:00
|
|
|
</IfModule>
|
2016-03-14 19:40:57 +01:00
|
|
|
<IfModule mod_php7.c>
|
2015-08-16 15:40:03 +02:00
|
|
|
php_value mbstring.func_overload 0
|
|
|
|
php_value default_charset 'UTF-8'
|
2015-08-20 11:24:28 +02:00
|
|
|
php_value output_buffering 0
|
2015-08-16 15:40:03 +02:00
|
|
|
<IfModule mod_env.c>
|
|
|
|
SetEnv htaccessWorking true
|
|
|
|
</IfModule>
|
2011-08-22 17:16:37 +02:00
|
|
|
</IfModule>
|
2012-01-03 04:55:19 +01:00
|
|
|
<IfModule mod_rewrite.c>
|
2015-08-16 15:40:03 +02:00
|
|
|
RewriteEngine on
|
2019-07-01 18:45:27 +02:00
|
|
|
RewriteCond %{HTTP_USER_AGENT} DavClnt
|
|
|
|
RewriteRule ^$ /remote.php/webdav/ [L,R=302]
|
2015-08-16 15:40:03 +02:00
|
|
|
RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
|
2015-11-18 17:40:27 +01:00
|
|
|
RewriteRule ^\.well-known/carddav /remote.php/dav/ [R=301,L]
|
|
|
|
RewriteRule ^\.well-known/caldav /remote.php/dav/ [R=301,L]
|
2015-08-16 15:40:03 +02:00
|
|
|
RewriteRule ^remote/(.*) remote.php [QSA,L]
|
2016-06-03 16:34:26 +02:00
|
|
|
RewriteRule ^(?:build|tests|config|lib|3rdparty|templates)/.* - [R=404,L]
|
2020-12-28 15:36:23 +01:00
|
|
|
RewriteRule ^\.well-known/(?!acme-challenge|pki-validation) /index.php [QSA,L]
|
|
|
|
RewriteRule ^(?:\.(?!well-known)|autotest|occ|issue|indie|db_|console).* - [R=404,L]
|
2012-01-03 04:55:19 +01:00
|
|
|
</IfModule>
|
2012-10-28 16:00:31 +01:00
|
|
|
<IfModule mod_mime.c>
|
2015-08-16 15:40:03 +02:00
|
|
|
AddType image/svg+xml svg svgz
|
|
|
|
AddEncoding gzip svgz
|
2012-10-28 16:00:31 +01:00
|
|
|
</IfModule>
|
2015-01-28 12:42:15 +01:00
|
|
|
<IfModule mod_dir.c>
|
2015-08-16 15:40:03 +02:00
|
|
|
DirectoryIndex index.php index.html
|
2013-04-24 15:11:53 +02:00
|
|
|
</IfModule>
|
2013-02-26 17:38:59 +01:00
|
|
|
AddDefaultCharset utf-8
|
2012-05-11 10:47:42 +02:00
|
|
|
Options -Indexes
|
2014-01-08 07:56:08 +01:00
|
|
|
<IfModule pagespeed_module>
|
2015-03-26 15:30:00 +01:00
|
|
|
ModPagespeed Off
|
2014-10-14 06:36:53 +02:00
|
|
|
</IfModule>
|