Options+FollowSymLinks<IfModule mod_rewrite.c>RewriteEngineOnRewriteBase/<Files.*>OrderDeny,AllowDenyFromAll</Files># Allow asset folders throughRewriteRule^(fuel/modules/(.+)?/assets/(.+))-[L]# Protect application and system files from being viewedRewriteRule^(fuel/install/.+|search.php/+|fuel/crons/.+|fuel/data_backup/.+|fuel/codeigniter/.+|fuel/modules/.+|fuel/application/.+|.git.+)-[F,L]RewriteCond%{REQUEST_FILENAME}!-f
RewriteCond%{REQUEST_FILENAME}!-d
RewriteRule.* index.php/$0 [L]</IfModule>Options-Indexes# ----------------------------------------------------------------------# Gzip compression# ----------------------------------------------------------------------#Gzip<ifmodule mod_deflate.c>AddOutputFilterByType DEFLATE text/text text/html text/plain text/xml text/css application/x-javascript application/javascript text/javascript
</ifmodule>#End Gzip# ----------------------------------------------------------------------# Better website experience for IE users# ----------------------------------------------------------------------# Force the latest IE version, in various cases when it may fall back to IE7 mode# github.com/rails/rails/commit/123eb25#commitcomment-118920# Use ChromeFrame if it's installed for a better experience for the poor IE folk<IfModule mod_headers.c>Header set X-UA-Compatible "IE=Edge,chrome=1"# mod_headers can't match by content-type, but we don't want to send this header on *everything*...<FilesMatch".(js|css|gif|png|jpe?g|pdf|xml|oga|ogg|m4a|ogv|mp4|m4v|webm|svg|svgz|eot|ttf|otf|woff|ico|webp|appcache|manifest|htc|crx|oex|xpi|safariextz|vcf)$">Header unset X-UA-Compatible
</FilesMatch></IfModule># ----------------------------------------------------------------------# Proper MIME type for all files# ----------------------------------------------------------------------# JavaScript# Normalize to standard type (it's sniffed in IE anyways)# tools.ietf.org/html/rfc4329#section-7.2AddType application/javascript js jsonp
AddType application/json json
# AudioAddType audio/ogg oga ogg
AddType audio/mp4 m4a f4a f4b
# VideoAddType video/ogg ogv
AddType video/mp4 mp4 m4v f4v f4p
AddType video/webm webm
AddType video/x-flv flv
# SVG# Required for svg webfonts on iPad# twitter.com/FontSquirrel/status/14855840545AddType image/svg+xml svg svgz
AddEncoding gzip svgz
# WebfontsAddType application/vnd.ms-fontobject eot
AddType application/x-font-ttf ttf ttc
AddType font/opentype otf
AddType application/x-font-woff woff
# Assorted typesAddType image/x-icon ico
AddType image/webp webp
AddType text/cache-manifest appcache manifest
AddType text/x-component htc
AddType application/xml rss atom xml rdf
AddType application/x-chrome-extension crx
AddType application/x-opera-extension oex
AddType application/x-xpinstall xpi
AddType application/octet-stream safariextz
AddType application/x-web-app-manifest+json webapp
AddType text/x-vcard vcf
AddType application/x-shockwave-flash swf
AddType text/vtt vtt
# ----------------------------------------------------------------------# Expires headers (for better cache control)# ----------------------------------------------------------------------# These are pretty far-future expires headers.# They assume you control versioning with filename-based cache busting# Additionally, consider that outdated proxies may miscache# www.stevesouders.com/blog/2008/08/23/revving-filenames-dont-use-querystring/# If you don't use filenames to version, lower the CSS and JS to something like# "access plus 1 week".<IfModule mod_expires.c>ExpiresActive on
# Perhaps better to whitelist expires rules? Perhaps.ExpiresDefault"access plus 1 month"# cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5)ExpiresByType text/cache-manifest "access plus 0 seconds"# Your document htmlExpiresByType text/html "access plus 0 seconds"# DataExpiresByType text/xml "access plus 0 seconds"ExpiresByType application/xml "access plus 0 seconds"ExpiresByType application/json "access plus 0 seconds"# FeedExpiresByType application/rss+xml "access plus 1 hour"ExpiresByType application/atom+xml "access plus 1 hour"# Favicon (cannot be renamed)ExpiresByType image/x-icon "access plus 1 week"# Media: images, video, audioExpiresByType image/gif "access plus 1 month"ExpiresByType image/png "access plus 1 month"ExpiresByType image/jpeg "access plus 1 month"ExpiresByType video/ogg "access plus 1 month"ExpiresByType audio/ogg "access plus 1 month"ExpiresByType video/mp4 "access plus 1 month"ExpiresByType video/webm "access plus 1 month"# HTC files (css3pie)ExpiresByType text/x-component "access plus 1 month"# WebfontsExpiresByType application/x-font-ttf "access plus 1 month"ExpiresByType font/opentype "access plus 1 month"ExpiresByType application/x-font-woff "access plus 1 month"ExpiresByType image/svg+xml "access plus 1 month"ExpiresByType application/vnd.ms-fontobject "access plus 1 month"# CSS and JavaScriptExpiresByType text/css "access plus 1 year"ExpiresByType application/javascript "access plus 1 year"</IfModule># ----------------------------------------------------------------------# ETag removal# ----------------------------------------------------------------------# FileETag None is not enough for every server.<IfModule mod_headers.c>Header unset ETag</IfModule># Since we're sending far-future expires, we don't need ETags for# static content.# developer.yahoo.com/performance/rules.html#etagsFileETagNone# ----------------------------------------------------------------------# Stop screen flicker in IE on CSS rollovers# ----------------------------------------------------------------------# The following directives stop screen flicker in IE on CSS rollovers - in# combination with the "ExpiresByType" rules for images (see above).# BrowserMatch "MSIE" brokenvary=1# BrowserMatch "Mozilla/4.[0-9]{2}" brokenvary=1# BrowserMatch "Opera" !brokenvary# SetEnvIf brokenvary 1 force-no-vary# ----------------------------------------------------------------------# Set Keep-Alive Header# ----------------------------------------------------------------------# Keep-Alive allows the server to send multiple requests through one# TCP-connection. Be aware of possible disadvantages of this setting. Turn on# if you serve a lot of static content.# <IfModule mod_headers.c># Header set Connection Keep-Alive# </IfModule># ----------------------------------------------------------------------# Start rewrite engine# ----------------------------------------------------------------------# Turning on the rewrite engine is necessary for the following rules and# features. FollowSymLinks must be enabled for this to work.# Some cloud hosting services require RewriteBase to be set: goo.gl/HOcPN# If using the h5bp in a subdirectory, use `RewriteBase /foo` instead where# 'foo' is your directory.# If your web host doesn't allow the FollowSymlinks option, you may need to# comment it out and use `Options +SymLinksOfOwnerMatch`, but be aware of the# performance impact: http://goo.gl/Mluzd<IfModule mod_rewrite.c>Options+FollowSymlinks# Options +SymLinksIfOwnerMatchRewriteEngineOn# RewriteBase /</IfModule># ----------------------------------------------------------------------# Suppress or force the "www." at the beginning of URLs# ----------------------------------------------------------------------# The same content should never be available under two different URLs -# especially not with and without "www." at the beginning, since this can cause# SEO problems (duplicate content). That's why you should choose one of the# alternatives and redirect the other one.# By default option 1 (no "www.") is activated.# no-www.org/faq.php?q=class_b# If you'd prefer to use option 2, just comment out all option 1 lines# and uncomment option 2.# IMPORTANT: NEVER USE BOTH RULES AT THE SAME TIME!# ----------------------------------------------------------------------# Option 1:# Rewrite "www.example.com -> example.com".<IfModule mod_rewrite.c>RewriteCond%{HTTPS}!=on
RewriteCond%{HTTP_HOST}^www.(.+)$ [NC]RewriteRule^ http://%1%{REQUEST_URI}[R=301,L]</IfModule># ----------------------------------------------------------------------# Option 2:# Rewrite "example.com -> www.example.com".# Be aware that the following rule might not be a good idea if you use "real"# subdomains for certain parts of your website.# <IfModule mod_rewrite.c># RewriteCond %{HTTPS} !=on# RewriteCond %{HTTP_HOST} !^www..+$ [NC]# RewriteRule ^ http://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]# </IfModule># ----------------------------------------------------------------------# Prevent SSL cert warnings# ----------------------------------------------------------------------# Rewrite secure requests properly to prevent SSL cert warnings, e.g. prevent# https://www.example.com when your cert only allows https://secure.example.com# <IfModule mod_rewrite.c># RewriteCond %{SERVER_PORT} !^443# RewriteRule ^ https://example-domain-please-change-me.com%{REQUEST_URI} [R=301,L]# </IfModule># ----------------------------------------------------------------------# UTF-8 encoding# ----------------------------------------------------------------------# Use UTF-8 encoding for anything served text/plain or text/htmlAddDefaultCharset utf-8
# Force UTF-8 for a number of file formatsAddCharset utf-8 .atom .css .js .json .rss .vtt .xml