.htaccess 1019 Bytes
Newer Older
1
Options -Indexes
Zot's avatar
Zot committed
2
AddType application/x-java-archive .jar
Friendika's avatar
Friendika committed
3
AddType audio/ogg .oga
4
#SSLCipherSuite HIGH:AES256-SHA:AES128-SHA:RC4:!aNULL:!eNULL:!EDH
Zot's avatar
Zot committed
5

6 7
# don't allow any web access to logfiles, even after rotation/compression
<FilesMatch "\.(out|log|gz)$">
8 9 10 11 12 13 14
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
  </IfModule>
Zot's avatar
Zot committed
15 16
</FilesMatch>

Zot's avatar
Zot committed
17 18
<IfModule mod_rewrite.c>
  RewriteEngine on
19
  # Protect repository directory from browsing
20
  RewriteRule "(^|/)\.git" - [F]
friendica's avatar
friendica committed
21
  RewriteRule "(^|/)store" - [F]
22

Zot's avatar
Zot committed
23
  # Rewrite current-style URLs of the form 'index.php?q=x'.
24 25 26
  # Also place auth information into REMOTE_USER for sites running
  # in CGI mode.

redmatrix's avatar
redmatrix committed
27 28 29
  RewriteCond %{REQUEST_URI} ^/\.well\-known/.*
  RewriteRule ^(.*)$ index.php?q=$1 [E=REMOTE_USER:%{HTTP:Authorization},L,QSA]

Zot's avatar
Zot committed
30 31
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
32
  RewriteRule ^(.*)$ index.php?q=$1 [E=REMOTE_USER:%{HTTP:Authorization},L,QSA]
Zot's avatar
Zot committed
33
</IfModule>
34