# https://stackoverflow.com/a/10034368 <FilesMatch "\.(ico|gif|jpg|png)$"> ExpiresActive On ExpiresDefault "access plus 11 month" Header append Cache-Control "public" </FilesMatch> <FilesMatch "\.(css|js)$"> ExpiresActive On ExpiresDefault "access plus 1 week" Header append Cache-Control "public" </FilesMatch> # Redirect HTTP to HTTPS # https://wiki.apache.org/httpd/RewriteHTTPToHTTPS <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTPS} !=on RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] </IfModule> # STS Header # https://stackoverflow.com/questions/24144552/how-to-set-hsts-header-from-htaccess-only-on-https Header set Strict-Transport-Security "max-age=31536000" env=HTTPS # BEGIN WordPress <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule> # END WordPress