Haack's Wiki

User Tools

Site Tools

Trace:
computing:selfhostedwp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
computing:selfhostedwp [2026/04/12 15:50] – oemb1905computing:selfhostedwp [2026/04/12 15:53] (current) – oemb1905
Line 141: Line 141:
  
 <code> <code>
-  <IfModule mod_expires.c> +<IfModule mod_expires.c> 
-          ExpiresActive On +    ExpiresActive On 
-          ExpiresByType image/jpg "access 1 year" +    ExpiresByType image/jpg "access 1 year" 
-          ExpiresByType image/jpeg "access 1 year" +    ExpiresByType image/jpeg "access 1 year" 
-          ExpiresByType image/gif "access 1 year" +    ExpiresByType image/gif "access 1 year" 
-          ExpiresByType image/png "access 1 year" +    ExpiresByType image/png "access 1 year" 
-          ExpiresByType text/css "access 1 week" +    ExpiresByType text/css "access 1 week" 
-          ExpiresByType text/html "access 1 month" +    ExpiresByType text/html "access 1 month" 
-          ExpiresByType text/x-javascript "access 1 week" +    ExpiresByType text/x-javascript "access 1 week" 
-          ExpiresDefault "access 1 month" +    ExpiresDefault "access 1 month" 
-  </IfModule>+</IfModule>
 </code> </code>
  
 <code> <code>
-  <IfModule mod_rewrite.c> +<IfModule mod_rewrite.c> 
-          RewriteEngine On +    RewriteEngine On 
-          RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] +    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] 
-          RewriteBase / +    RewriteBase / 
-          RewriteRule ^index\.php$ - [L] +    RewriteRule ^index\.php$ - [L] 
-          RewriteCond %{REQUEST_FILENAME} !-f +    RewriteCond %{REQUEST_FILENAME} !-f 
-          RewriteCond %{REQUEST_FILENAME} !-d +    RewriteCond %{REQUEST_FILENAME} !-d 
-          RewriteRule . /index.php [L] +    RewriteRule . /index.php [L] 
-          <FilesMatch "\.(js|css|jpe?g|png|gif|eot|otf|svg|ttf|woff2?)$"> +    <FilesMatch "\.(js|css|jpe?g|png|gif|eot|otf|svg|ttf|woff2?)$"> 
-                  Header set Timing-Allow-Origin "*" +        Header set Timing-Allow-Origin "*" 
-          </FilesMatch> +    </FilesMatch> 
-  </IfModule>+</IfModule>
 </code> </code>
  
 <code> <code>
-  <IfModule mod_headers.c>+<IfModule mod_headers.c>
     # X-origin core security headers     # X-origin core security headers
     Header always set X-Content-Type-Options "nosniff"     Header always set X-Content-Type-Options "nosniff"
     Header always set X-Frame-Options "SAMEORIGIN"     Header always set X-Frame-Options "SAMEORIGIN"
     Header always set Referrer-Policy "strict-origin-when-cross-origin"     Header always set Referrer-Policy "strict-origin-when-cross-origin"
- 
     # HSTS     # HSTS
     Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS     Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
- 
     # Feature Policy     # Feature Policy
     Header always set Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), fullscreen=*"     Header always set Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), fullscreen=*"
- 
     # Cross Origin Openerand Embedder policies permissive for Gutenberg/iframes     # Cross Origin Openerand Embedder policies permissive for Gutenberg/iframes
     Header always set Cross-Origin-Opener-Policy "same-origin-allow-popups"     Header always set Cross-Origin-Opener-Policy "same-origin-allow-popups"
     Header always set Cross-Origin-Embedder-Policy "unsafe-none"     Header always set Cross-Origin-Embedder-Policy "unsafe-none"
- 
     # Cache and download protections; limited to dynamic files     # Cache and download protections; limited to dynamic files
     <FilesMatch "\.(php|html)$">     <FilesMatch "\.(php|html)$">
Line 193: Line 189:
         Header set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"         Header set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
     </FilesMatch>     </FilesMatch>
- 
     # Safe CSP for WordPress + Gutenberg      # Safe CSP for WordPress + Gutenberg 
     <FilesMatch "\.(php|html)$">     <FilesMatch "\.(php|html)$">
computing/selfhostedwp.txt · Last modified: by oemb1905

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
GNU Free Documentation License 1.3 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki