<IfModule mod_rewrite.c>
    RewriteEngine On

    # Redirecte to https
    RewriteCond %{HTTP:X-Forwarded-Proto} !=https
    RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L,N]

    # Redirecte dev domain to primary - see fortrabbit doc for example


    # Send would-be 404 requests to Craft
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_URI} !^/(favicon\.ico|apple-touch-icon.*\.png)$ [NC]
    RewriteRule (.+) index.php?p=$1 [QSA,L]

</IfModule>

<IfModule mod_headers.c>

  Header always set Permissions-Policy: interest-cohort=()
  Header always set X-FRAME-OPTIONS "SAMEORIGIN"
  Header always set Strict-Transport-Security "max-age=31536000"

  # Cache images and CSS files
    <filesMatch ".(css|js|svg|woff2|gif|png|jpg|jpeg|ico|pdf)$">
      Header set Cache-Control "max-age=31536000"
    </filesMatch>
</ifModule>
