morgane
ddef591108
CI / PHP Syntax Check (push) Waiting to run
CI / JavaScript Lint (push) Waiting to run
CI / Docker Build Test (push) Waiting to run
CI / Validate Translation Files (push) Waiting to run
CI / Auto-merge develop → main (push) Blocked by required conditions
CI / Create GitHub Release (push) Blocked by required conditions
34 lines
923 B
ApacheConf
34 lines
923 B
ApacheConf
RewriteEngine On
|
|
|
|
# Block sensitive files (Apache 2.4+)
|
|
<Files ".env">
|
|
Require all denied
|
|
</Files>
|
|
<Files ".env.example">
|
|
Require all denied
|
|
</Files>
|
|
<Files "backup.sh">
|
|
Require all denied
|
|
</Files>
|
|
<FilesMatch "^\.">
|
|
Require all denied
|
|
</FilesMatch>
|
|
|
|
# Force HTTPS (skip when terminated TLS is forwarded — Traefik, Caddy, NPM, …)
|
|
#RewriteCond %{HTTPS} !=on
|
|
#RewriteCond %{HTTP:X-Forwarded-Proto} !^https$ [NC]
|
|
#RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
|
|
|
|
# API routing
|
|
RewriteCond %{REQUEST_FILENAME} !-f
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
RewriteRule ^api/(.*)$ api/index.php?action=$1&%{QUERY_STRING} [L,QSA]
|
|
AddType application/x-x509-ca-cert .crt
|
|
|
|
# Prevent caching of JS/CSS so kiosk always gets fresh files
|
|
<FilesMatch "\.(js|css)$">
|
|
Header set Cache-Control "no-cache, no-store, must-revalidate"
|
|
Header set Pragma "no-cache"
|
|
Header set Expires "0"
|
|
</FilesMatch>
|