Options -Indexes
DirectoryIndex index.html
# Avoid host-wide error documents outside this directory's header rules.
ErrorDocument 400 default
ErrorDocument 403 default
ErrorDocument 404 default
ErrorDocument 500 default
ErrorDocument 503 default
RewriteEngine On
RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteRule ^api/(.*)$ gateway.php?path=$1 [QSA,L]
RewriteRule ^bridge$ gateway.php?bridge=1 [QSA,L]
<IfModule mod_headers.c>
Header set X-Content-Type-Options "nosniff"
# Keep these rules on downloads, redirects and error responses as well.
Header unset X-Robots-Tag
Header always set X-Robots-Tag "noindex, nofollow, nosnippet, noimageindex, noarchive"
Header set Referrer-Policy "no-referrer"
Header set Content-Security-Policy "default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; connect-src 'self'; frame-ancestors 'self' https://kaser-bamert.ch"
</IfModule>
