41 lines
1.1 KiB
ApacheConf
41 lines
1.1 KiB
ApacheConf
|
# ============================================
|
||
|
|
# ERV TICKET - .htaccess
|
||
|
|
# ============================================
|
||
|
|
|
||
|
|
# Защита .env файла
|
||
|
|
<Files ".env">
|
||
|
|
Require all denied
|
||
|
|
Order deny,allow
|
||
|
|
Deny from all
|
||
|
|
</Files>
|
||
|
|
|
||
|
|
# Защита config.php (необязательно, но для безопасности)
|
||
|
|
<Files "config.php">
|
||
|
|
Require all denied
|
||
|
|
Order deny,allow
|
||
|
|
Deny from all
|
||
|
|
</Files>
|
||
|
|
|
||
|
|
# Принудительный HTTPS (раскомментировать при наличии SSL)
|
||
|
|
# RewriteEngine On
|
||
|
|
# RewriteCond %{HTTPS} off
|
||
|
|
# RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
|
||
|
|
|
||
|
|
# Защита от просмотра директорий
|
||
|
|
Options -Indexes
|
||
|
|
|
||
|
|
# Безопасные заголовки
|
||
|
|
<IfModule mod_headers.c>
|
||
|
|
# XSS Protection
|
||
|
|
Header set X-XSS-Protection "1; mode=block"
|
||
|
|
|
||
|
|
# Prevent MIME sniffing
|
||
|
|
Header set X-Content-Type-Options "nosniff"
|
||
|
|
|
||
|
|
# Clickjacking protection
|
||
|
|
Header set X-Frame-Options "SAMEORIGIN"
|
||
|
|
|
||
|
|
# Referrer Policy
|
||
|
|
Header set Referrer-Policy "strict-origin-when-cross-origin"
|
||
|
|
</IfModule>
|