#####
#
# Example .htaccess file for TYPO3 CMS - for use with Apache Webserver
#
# This file includes settings for the following configuration options:
#
# - Compression
# - Caching
# - MIME types
# - Cross Origin requests
# - Rewriting and Access
# - Miscellaneous
# - PHP optimisation
#
# If you want to use it, you have to copy it to the root folder of your TYPO3 installation (if its
# not there already) and rename it to '.htaccess'. To make .htaccess files work, you might need to
# adjust the 'AllowOverride' directive in your Apache configuration file.
#
# IMPORTANT: You may need to change this file depending on your TYPO3 installation!
#            Consider adding this file's content to your webserver's configuration directly for speed improvement
#
# Lots of the options are taken from https://github.com/h5bp/html5-boilerplate/blob/master/dist/.htaccess
#
####


### Begin: Compression ###

# Compressing resource files will save bandwidth and so improve loading speed especially for users
# with slower internet connections. TYPO3 can compress the .js and .css files for you.
# *) Uncomment the following lines and
# *) Set $GLOBALS['TYPO3_CONF_VARS']['BE']['compressionLevel'] = 9 for the Backend
# *) Set $GLOBALS['TYPO3_CONF_VARS']['FE']['compressionLevel'] = 9 together with the TypoScript properties
#    config.compressJs and config.compressCss for GZIP compression of Frontend JS and CSS files.

#<FilesMatch "\.js\.gz">
#	AddType "text/javascript" .gz
#</FilesMatch>
#<FilesMatch "\.css\.gz">
#	AddType "text/css" .gz
#</FilesMatch>
#AddEncoding x-gzip .gz

<IfModule mod_deflate.c>
	# Force compression for mangled `Accept-Encoding` request headers
	<IfModule mod_setenvif.c>
		<IfModule mod_headers.c>
			SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
			RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
		</IfModule>
	</IfModule>

	# Compress all output labeled with one of the following media types.
	#
	# (!) For Apache versions below version 2.3.7 you don't need to
	# enable `mod_filter` and can remove the `<IfModule mod_filter.c>`
	# and `</IfModule>` lines as `AddOutputFilterByType` is still in
	# the core directives.
	#
	# https://httpd.apache.org/docs/current/mod/mod_filter.html#addoutputfilterbytype

	<IfModule mod_filter.c>
		AddOutputFilterByType DEFLATE application/atom+xml \
			application/javascript \
			application/json \
			application/ld+json \
			application/manifest+json \
			application/rdf+xml \
			application/rss+xml \
			application/schema+json \
			application/vnd.geo+json \
			application/geo+json \
			application/vnd.ms-fontobject \
			application/x-font-ttf \
			application/x-javascript \
			application/x-web-app-manifest+json \
			application/xhtml+xml \
			application/xml \
			font/eot \
			font/opentype \
			font/otf \
			font/ttf \
			image/bmp \
			image/svg+xml \
			image/vnd.microsoft.icon \
			image/x-icon \
			text/cache-manifest \
			text/css \
			text/html \
			text/javascript \
			text/plain \
			text/vcard \
			text/vnd.rim.location.xloc \
			text/vtt \
			text/x-component \
			text/x-cross-domain-policy \
			text/xml
	</IfModule>

	<IfModule mod_mime.c>
		AddEncoding gzip svgz
	</IfModule>
</IfModule>

### End: Compression ###



### Begin: Browser caching of resource files ###

# This affects Frontend and Backend and increases performance.
<IfModule mod_expires.c>

	ExpiresActive On
	ExpiresDefault                                      "access plus 1 month"

	ExpiresByType text/css                              "access plus 1 year"

	ExpiresByType application/json                      "access plus 0 seconds"
	ExpiresByType application/ld+json                   "access plus 0 seconds"
	ExpiresByType application/schema+json               "access plus 0 seconds"
	ExpiresByType application/vnd.geo+json              "access plus 0 seconds"
	ExpiresByType application/geo+json                  "access plus 0 seconds"
	ExpiresByType application/xml                       "access plus 0 seconds"
	ExpiresByType text/xml                              "access plus 0 seconds"

	ExpiresByType image/vnd.microsoft.icon              "access plus 1 week"
	ExpiresByType image/x-icon                          "access plus 1 week"

	ExpiresByType text/x-component                      "access plus 1 month"

	ExpiresByType text/html                             "access plus 0 seconds"

	ExpiresByType application/javascript                "access plus 1 year"
	ExpiresByType application/x-javascript              "access plus 1 year"
	ExpiresByType text/javascript                       "access plus 1 year"

	ExpiresByType application/manifest+json             "access plus 1 week"
	ExpiresByType application/x-web-app-manifest+json   "access plus 0 seconds"
	ExpiresByType text/cache-manifest                   "access plus 0 seconds"

	ExpiresByType audio/ogg                             "access plus 1 month"
	ExpiresByType image/apng                            "access plus 1 month"
	ExpiresByType image/avif                            "access plus 1 month"
	ExpiresByType image/avif-sequence                   "access plus 1 month"
	ExpiresByType image/bmp                             "access plus 1 month"
	ExpiresByType image/gif                             "access plus 1 month"
	ExpiresByType image/jpeg                            "access plus 1 month"
	ExpiresByType image/jxl                             "access plus 1 month"
	ExpiresByType image/png                             "access plus 1 month"
	ExpiresByType image/svg+xml                         "access plus 1 month"
	ExpiresByType image/webp                            "access plus 1 month"
	ExpiresByType video/mp4                             "access plus 1 month"
	ExpiresByType video/ogg                             "access plus 1 month"
	ExpiresByType video/webm                            "access plus 1 month"

	ExpiresByType application/atom+xml                  "access plus 1 hour"
	ExpiresByType application/rdf+xml                   "access plus 1 hour"
	ExpiresByType application/rss+xml                   "access plus 1 hour"

	ExpiresByType font/collection                       "access plus 1 month"
	ExpiresByType application/vnd.ms-fontobject         "access plus 1 month"
	ExpiresByType font/eot                              "access plus 1 month"
	ExpiresByType font/opentype                         "access plus 1 month"
	ExpiresByType font/otf                              "access plus 1 month"
	ExpiresByType application/x-font-ttf                "access plus 1 month"
	ExpiresByType font/ttf                              "access plus 1 month"
	ExpiresByType application/font-woff                 "access plus 1 month"
	ExpiresByType application/x-font-woff               "access plus 1 month"
	ExpiresByType font/woff                             "access plus 1 month"
	ExpiresByType application/font-woff2                "access plus 1 month"
	ExpiresByType font/woff2                            "access plus 1 month"

	ExpiresByType text/x-cross-domain-policy            "access plus 1 week"

	<FilesMatch "^index\.php$">
		ExpiresActive Off
	</FilesMatch>

</IfModule>

### End: Browser caching of resource files ###


### Begin: MIME types ###

# Proper MIME types for all files
<IfModule mod_mime.c>
	# Security configuration
	RemoveType .html .htm
	<FilesMatch ".+\.html?$">
		AddType text/html .html .htm
	</FilesMatch>

	RemoveType .svg .svgz
	<FilesMatch ".+\.svgz?$">
		AddType image/svg+xml .svg .svgz
	</FilesMatch>

	# Data interchange
	AddType application/atom+xml                        atom
	AddType application/json                            json map topojson
	AddType application/ld+json                         jsonld
	AddType application/rss+xml                         rss
	AddType application/vnd.geo+json                    geojson
	AddType application/xml                             rdf xml

	# JavaScript
	AddType application/javascript                      js mjs

	# Manifest files
	AddType application/manifest+json                   webmanifest
	AddType application/x-web-app-manifest+json         webapp
	AddType text/cache-manifest                         appcache

	# Media files

	AddType audio/mp4                                   f4a f4b m4a
	AddType audio/ogg                                   oga ogg opus
	AddType image/avif                                  avif
	AddType image/avif-sequence                         avifs
	AddType image/bmp                                   bmp
	AddType image/jxl                                   jxl
	AddType image/webp                                  webp
	AddType video/mp4                                   f4v f4p m4v mp4
	AddType video/ogg                                   ogv
	AddType video/webm                                  webm
	AddType video/x-flv                                 flv
	AddType image/x-icon                                cur ico

	# Web fonts
	AddType font/woff                                   woff
	AddType font/woff2                                  woff2
	AddType application/vnd.ms-fontobject               eot
	AddType font/ttf                                    ttc ttf
	AddType font/otf                                    otf

	# Other
	AddType application/octet-stream                    safariextz
	AddType application/x-bb-appworld                   bbaw
	AddType application/x-chrome-extension              crx
	AddType application/x-opera-extension               oex
	AddType application/x-xpinstall                     xpi
	AddType text/vcard                                  vcard vcf
	AddType text/vnd.rim.location.xloc                  xloc
	AddType text/vtt                                    vtt
	AddType text/x-component                            htc

</IfModule>

# UTF-8 encoding
AddDefaultCharset utf-8
<IfModule mod_mime.c>
	AddCharset utf-8 .atom .css .js .json .manifest .rdf .rss .vtt .webapp .webmanifest .xml
</IfModule>

### End: MIME types ###



### Begin: Cross Origin ###

# Send the CORS header for images when browsers request it.
<IfModule mod_setenvif.c>
	<IfModule mod_headers.c>
		<FilesMatch "\.(avifs?|bmp|cur|gif|ico|jpe?g|png|svgz?|webp)$">
			SetEnvIf Origin ":" IS_CORS
			Header set Access-Control-Allow-Origin "*" env=IS_CORS
		</FilesMatch>
	</IfModule>
</IfModule>

# Allow cross-origin access to web fonts.
<IfModule mod_headers.c>
	<FilesMatch "\.(eot|otf|tt[cf]|woff2?)$">
		Header set Access-Control-Allow-Origin "*"
	</FilesMatch>
</IfModule>

### End: Cross Origin ###


# staging.ep-reisen.de shows the TYPO3 13 frontend to backend users only; keep it out of search engines
<IfModule mod_setenvif.c>
	<IfModule mod_headers.c>
		SetEnvIfNoCase Host ^staging\.ep-reisen\.de$ EP_STAGING_HOST
		Header always set X-Robots-Tag "noindex, nofollow" env=EP_STAGING_HOST
	</IfModule>
</IfModule>



### Begin: Rewriting and Access ###

<IfModule mod_rewrite.c>

	# Enable URL rewriting
	RewriteEngine On

	# Legacy and campaign domains, consolidated onto their current host (from TYPO3 10's
	# public/.htaccess). These have to stay ahead of the Force SSL block and of TYPO3's catch-all
	# at the end of this file.
	RewriteRule ^buchung/(.*)$ https://bpn.ep-reisen.de/$1 [R=302,L,QSA]

	RewriteCond %{HTTP_HOST} ^cllt\-touristik\.at$ [NC]
	RewriteRule ^(.*) https://www.cllt-touristik.at/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^alpinevacation\.ch$ [NC]
	RewriteRule ^(.*) https://www.alpinevacation.ch/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^(www\.)?semesterendeskireisen\.de$ [NC]
	RewriteRule ^(.*) https://www.semesterende-skireisen.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^semesterende\-skireisen\.de$ [NC]
	RewriteRule ^(.*) https://www.semesterende-skireisen.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^snowzone\.net$ [NC]
	RewriteRule ^(.*) https://www.snowzone.net/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^ski\-boarderweek\.de$ [NC]
	RewriteRule ^(.*) https://www.ski-boarderweek.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ski\-boarderweek\.(com|eu)$ [NC]
	RewriteRule ^(.*) https://www.ski-boarderweek.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} skiboarderweek\.(de|eu)$ [NC]
	RewriteRule ^(.*) https://www.ski-boarderweek.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^(www\.)?boarderweek\.de$ [NC]
	RewriteRule ^(.*) https://www.ski-boarderweek.de/$1 [L,R=301]

	# Every page goes to the Haus Christiler page on semesterende-skireisen
	RewriteCond %{HTTP_HOST} ^(www\.)?ahrntal\-christiler\.de$ [NC]
	RewriteRule ^ https://www.semesterende-skireisen.de/reiseziele/italien/ahrntal/haus-christiler [L,R=301]

	RewriteCond %{HTTP_HOST} ^ski\-wochenenden\.de$ [NC]
	RewriteRule ^(.*) https://www.ski-wochenenden.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^(www\.)?skiwochenenden\.de$ [NC]
	RewriteRule ^(.*) https://www.ski-wochenenden.de/$1 [L,R=301]

	# E&P Events is retired: every page goes to the company trips page
	RewriteCond %{HTTP_HOST} ^(www\.)?ep\-events\.de$ [NC]
	RewriteRule ^ https://www.ep-reisen.de/reisen-fuer-gruppen/gruppenreisen/firmenreisen/ [L,R=301]

	# Every page goes to the Haus Waldschlössli group house page
	RewriteCond %{HTTP_HOST} ^(www\.)?waldschloessli\-davos\.de$ [NC]
	RewriteRule ^ https://www.ep-reisen.de/reisen-fuer-gruppen/gruppenhaeuser/gruppenhaeuser-mieten/davos-haus-waldschloessli/ [L,R=301]

	RewriteCond %{HTTP_HOST} ^ep\-reisen\.de$ [NC]
	RewriteRule ^(.*) https://www.ep-reisen.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^(www\.)?ep\-reisen\.(com|info)$ [NC]
	RewriteRule ^(.*) https://www.ep-reisen.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^(www\.)?epreisen\.de$ [NC]
	RewriteRule ^(.*) https://www.ep-reisen.de/$1 [L,R=301]

	RewriteCond %{HTTP_HOST} ^(www\.)?schneereisen\.com$ [NC]
	RewriteRule ^(.*) https://www.ep-reisen.de/$1 [L,R=301]

	# The dropped path is deliberate: snow-break sends every deep link to the snowbreak
	# landing page, unlike unichamp below, which keeps it.
	RewriteCond %{HTTP_HOST} ^(www\.)?snow\-break\.(de|com) [NC]
	RewriteRule (.*) https://snowbreak.ep-reisen.de/ [R=302,L]

	# Matches the bare domain as well, so it lands on snowbreak in one hop.
	RewriteCond %{HTTP_HOST} ^(www\.)?unichamp\.de$ [NC]
	RewriteRule ^(.*) https://snowbreak.ep-reisen.de/$1 [L,R=302]

	RewriteCond %{HTTP_HOST} ^(www\.)?unisnow\.(de|com)$ [NC]
	RewriteRule ^(.*) https://snowbreak.ep-reisen.de/$1 [L,R=302]

	# Force SSL
	RewriteCond %{HTTPS} off
	RewriteCond %{HTTP:X-Forwarded-Proto} =http
	RewriteRule (.*) https://%{HTTP_HOST}/$1 [R=301,L]

	# Store the current location in an environment variable CWD to use
	# mod_rewrite in .htaccess files without knowing the RewriteBase
	RewriteCond $0#%{REQUEST_URI} ([^#]*)#(.*)\1$
	RewriteRule ^.*$ - [E=CWD:%2]

	# Rules to set ApplicationContext based on hostname
	#RewriteCond %{HTTP_HOST} ^dev\.example\.com$
	#RewriteRule .? - [E=TYPO3_CONTEXT:Development]
	# Test vhost (base variant in config/sites/ep-reisen)
	RewriteCond %{HTTP_HOST} ^staging\.ep-reisen\.de$
	RewriteRule .? - [E=TYPO3_CONTEXT:Production/Staging]
	# The frontend lives on www.ep-reisen.de; here it would be duplicate
	# content, so only the backend and the files it loads stay on this host
	# (original requests only: the index.php hand-over below runs through these rules again)
	# Logged-in backend users (be_typo_user cookie of this host) see the TYPO3 13 frontend here, to check
	# pages before they go live on www; the host sends noindex (see the headers section)
	RewriteCond %{ENV:REDIRECT_STATUS} ^$
	RewriteCond %{HTTP_HOST} ^staging\.ep-reisen\.de$ [NC]
	RewriteCond %{REQUEST_URI} !^/(?:typo3|_assets|typo3temp|fileadmin|\.well-known)(?:/|$)
	RewriteCond %{HTTP_COOKIE} !(?:^|;\s*)be_typo_user=
	RewriteRule ^ https://www.ep-reisen.de%{REQUEST_URI} [R=301,L]
	#RewriteCond %{HTTP_HOST} ^www\.example\.com$
	#RewriteRule .? - [E=TYPO3_CONTEXT:Production]

	# Rule for versioned static files, configured through:
	# - $GLOBALS['TYPO3_CONF_VARS']['BE']['versionNumberInFilename']
	# - $GLOBALS['TYPO3_CONF_VARS']['FE']['versionNumberInFilename']
	# IMPORTANT: This rule has to be the very first RewriteCond in order to work!
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule ^(.+)\.(\d+)\.(php|js|mjs|css|png|jpg|gif|svg|avif|webp|gz)$ %{ENV:CWD}$1.$3 [L]

	# Access block for folders
	RewriteRule _(?:recycler|temp)_/ - [F]
	RewriteRule fileadmin/templates/.*\.(?:txt|ts)$ - [F]
	RewriteRule ^(?:vendor|typo3_src|typo3temp/var) - [F]
	RewriteRule (?:typo3conf/ext|typo3/sysext|typo3/ext)/[^/]+/(?:Configuration|Resources/Private|Tests?|Documentation|docs?)/ - [F]

	# Block access to all hidden files and directories with the exception of
	# the visible content from within the `/.well-known/` hidden directory (RFC 5785).
	RewriteCond %{REQUEST_URI} "!(^|/)\.well-known/([^./]+./?)+$" [NC]
	RewriteCond %{SCRIPT_FILENAME} -d [OR]
	RewriteCond %{SCRIPT_FILENAME} -f
	RewriteRule (?:^|/)\. - [F]

	# Stop rewrite processing, if we are in any known directory
	# NOTE: Add your additional local storages here
	RewriteRule ^(?:fileadmin/|typo3conf/|typo3temp/|uploads/) - [L]

	### Begin: StaticFileCache (preparation) ####

	# Document root configuration
	RewriteRule .* - [E=SFC_ROOT:%{DOCUMENT_ROOT}]

	# Cleanup URI
	RewriteCond %{REQUEST_URI} ^.*$
	RewriteRule .* - [E=SFC_URI:/%{REQUEST_URI}]
	RewriteCond %{REQUEST_URI} ^/.*$
	RewriteRule .* - [E=SFC_URI:%{REQUEST_URI}]
	RewriteCond %{REQUEST_URI} ^/?$
	RewriteRule .* - [E=SFC_URI:/]

	# Cleanup HOST
	RewriteCond %{HTTP_HOST} ^([^:]+)(:[0-9]+)?$
	RewriteRule .* - [E=SFC_HOST:%1]

	# Get scheme
	RewriteRule .* - [E=SFC_PROTOCOL:http]
	RewriteCond %{SERVER_PORT} ^443$ [OR]
	RewriteCond %{HTTP:X-Forwarded-Proto} https
	RewriteRule .* - [E=SFC_PROTOCOL:https]

	# Get port
	RewriteRule .* - [E=SFC_PORT:80]
	RewriteCond %{ENV:SFC_PROTOCOL} ^https$ [NC]
	RewriteRule .* - [E=SFC_PORT:443]
	RewriteCond %{SERVER_PORT} ^[0-9]+$
	RewriteRule .* - [E=SFC_PORT:%{SERVER_PORT}]
	RewriteCond %{HTTP:X-Forwarded-Port} ^[0-9]+$
	RewriteRule .* - [E=SFC_PORT:%{HTTP:X-Forwarded-Port}]

	# Full path for redirect
	RewriteRule .* - [E=SFC_FULLPATH:typo3temp/assets/tx_staticfilecache/%{ENV:SFC_PROTOCOL}_%{ENV:SFC_HOST}_%{ENV:SFC_PORT}%{ENV:SFC_URI}/index]

	# Extension (Order: br, gzip, default)
	RewriteRule .* - [E=SFC_EXT:]
	RewriteCond %{HTTP:Accept-Encoding} br [NC]
	RewriteRule .* - [E=SFC_EXT:.br]
	RewriteCond %{ENV:SFC_ROOT}/%{ENV:SFC_FULLPATH}%{ENV:SFC_EXT} !-f
	RewriteRule .* - [E=SFC_EXT:]
	RewriteCond %{ENV:SFC_EXT} ^$
	RewriteCond %{HTTP:Accept-Encoding} gzip [NC]
	RewriteRule .* - [E=SFC_EXT:.gz]
	RewriteCond %{ENV:SFC_EXT} ^\.gz$
	RewriteCond %{ENV:SFC_ROOT}/%{ENV:SFC_FULLPATH}%{ENV:SFC_EXT} !-f
	RewriteRule .* - [E=SFC_EXT:]

	# Write Extension to SFC_FULLPATH
	RewriteRule .* - [E=SFC_FULLPATH:%{ENV:SFC_FULLPATH}%{ENV:SFC_EXT}]

	### Begin: StaticFileCache (main) ####

	# We only redirect URI's without query strings
	RewriteCond %{QUERY_STRING} ^$

	# It only makes sense to do the other checks if a static file actually exists.
	RewriteCond %{ENV:SFC_ROOT}/%{ENV:SFC_FULLPATH} -f

	# NO frontend or backend user is logged in. Logged in users may see different
	# information than anonymous users. But the anonymous version is cached. So
	# don't show the anonymous version to logged in users.
	RewriteCond %{HTTP_COOKIE} !staticfilecache [NC]

	# Avoid cached versions for workspace preview links of users that are not logged in
	RewriteCond %{HTTP_COOKIE} !ADMCMD_prev [NC]

	# We only redirect GET requests
	RewriteCond %{REQUEST_METHOD} GET

	# Rewrite the request to the static file.
	RewriteRule .* %{ENV:SFC_ROOT}/%{ENV:SFC_FULLPATH} [L]

	# Do not allow direct call the cache entries
	RewriteCond %{ENV:SFC_URI} ^/typo3temp/assets/tx_staticfilecache/.*
	RewriteCond %{ENV:REDIRECT_STATUS} ^$
	RewriteRule .* - [F,L]

	### Begin: StaticFileCache (options) ####

	# Set proper content type and encoding for compressed html.
	<FilesMatch "\.gz$">
		SetEnv no-gzip 1
		SetEnv no-brotli 1
		<IfModule mod_headers.c>
			Header set Content-Encoding gzip
		</IfModule>
		ForceType text/html
	</FilesMatch>
	<FilesMatch "\.br$">
		SetEnv no-gzip 1
		SetEnv no-brotli 1
		<IfModule mod_headers.c>
			Header set Content-Encoding br
		</IfModule>
		ForceType text/html
	</FilesMatch>

	# Avoid .br files being delivered with Content-Language: br headers
	<IfModule mod_mime.c>
		RemoveLanguage .br
	</IfModule>

	### End: StaticFileCache ###

	# If the file/symlink/directory does not exist but is below /typo3/, redirect to the main TYPO3 entry point.
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteRule ^typo3/(.*)$ %{ENV:CWD}index.php [QSA,L]

	# If the file/symlink/directory does not exist => Redirect to index.php.
	# For httpd.conf, you need to prefix each '%{REQUEST_FILENAME}' with '%{DOCUMENT_ROOT}'.
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteCond %{REQUEST_FILENAME} !-l
	RewriteRule ^.*$ %{ENV:CWD}index.php [QSA,L]

</IfModule>

# Access block for files
# Apache < 2.3
<IfModule !mod_authz_core.c>
	<FilesMatch "(?i:^\.|^#.*#|^(?:ChangeLog|ToDo|Readme|License)(?:\.md|\.txt)?|^composer\.(?:json|lock)|^ext_conf_template\.txt|^ext_typoscript_constants\.txt|^ext_typoscript_setup\.txt|flexform[^.]*\.xml|locallang[^.]*\.(?:xml|xlf)|\.(?:bak|co?nf|cfg|neon|ya?ml|ts|typoscript|tsconfig|dist|fla|in[ci]|log|sh|sql(?:\..*)?|sqlite(?:\..*)?|sw[op]|git.*|rc)|.*~)$">
		Order allow,deny
		Deny from all
		Satisfy All
	</FilesMatch>
</IfModule>
# Apache ≥ 2.3
<IfModule mod_authz_core.c>
	<If "%{REQUEST_URI} =~ m#(?i:/\.|/\x23.*\x23|/(?:ChangeLog|ToDo|Readme|License)(?:\.md|\.txt)?|/composer\.(?:json|lock)|/ext_conf_template\.txt|/ext_typoscript_constants\.txt|/ext_typoscript_setup\.txt|flexform[^.]*\.xml|locallang[^.]*\.(?:xml|xlf)|\.(?:bak|co?nf|cfg|neon|ya?ml|ts|typoscript|tsconfig|dist|fla|in[ci]|log|sh|sql(?:\..*)?|sqlite(?:\..*)?|sw[op]|git.*|rc)|.*~)$#">
		Require all denied
	</If>
</IfModule>

# Block access to vcs directories
<IfModule mod_alias.c>
	RedirectMatch 404 /\.(?:git|svn|hg)/
</IfModule>

### End: Rewriting and Access ###



### Begin: Miscellaneous ###

# 404 error prevention for non-existing redirected folders
Options -MultiViews

# Make sure that directory listings are disabled.
<IfModule mod_autoindex.c>
	Options -Indexes
</IfModule>

<IfModule mod_headers.c>
	# Force IE to render pages in the highest available mode
	Header set X-UA-Compatible "IE=edge"
	<FilesMatch "\.(appcache|avifs?|crx|css|eot|gif|htc|ico|jpe?g|js|m4a|m4v|manifest|mp4|oex|oga|ogg|ogv|otf|pdf|png|safariextz|svgz?|ttf|vcf|webapp|webm|webp|woff2?|xml|xpi)$">
		Header unset X-UA-Compatible
	</FilesMatch>

	# Reducing MIME type security risks
	Header set X-Content-Type-Options "nosniff"
</IfModule>

# ETag removal
<IfModule mod_headers.c>
	Header unset ETag
</IfModule>
FileETag None

### End: Miscellaneous ###


# Add your own rules here.
