# OMIC — omicng.com · Dash World Limited
# NOTE: no <Directory> blocks and no php_flag here. Both are invalid in
# .htaccess context (php_flag additionally breaks under PHP-FPM/CGI,
# which is what cPanel normally runs) and would return HTTP 500.

Options -Indexes
DirectoryIndex index.php index.html

<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
    Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()"
</IfModule>

# Authenticated-page cache headers are set in app/lib/bootstrap.php. Keeping
# request-path expressions out of this file avoids Apache-version differences
# and malformed container directives that can take the whole site down.

# Force HTTPS. %{HTTPS} only — X-Forwarded-Proto is client-supplied and
# trusting it lets a caller skip the redirect.
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{HTTPS} !=on
    RewriteRule ^(.*)$ https://clean-maroon-koala.51-79-17-60.cpanel.site/$1 [R=301,L]
</IfModule>

<FilesMatch "\.(sql|log|ini|sh|bak|inc|env)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>

<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css     "access plus 7 days"
    ExpiresByType image/jpeg   "access plus 30 days"
    ExpiresByType image/png    "access plus 30 days"
    ExpiresByType image/webp   "access plus 30 days"
    ExpiresByType image/x-icon "access plus 30 days"
</IfModule>
