# Force HTTPS (cPanel AutoSSL / Let's Encrypt)
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

DirectoryIndex index.php

# Never serve dotfiles or env files
<FilesMatch "^\.">
  Require all denied
</FilesMatch>
<FilesMatch "\.(env|json|log|sql|md)$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "same-origin"
  Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
</IfModule>

php_value upload_max_filesize 20M
php_value post_max_size 24M
