Redirects

▼

URL Rewriting

▼

Enable RewriteEngine

Force HTTPS

Force www

Remove www

Remove trailing slash

SPA fallback (rewrite to index.html)

Security Headers

▼

X-Frame-Options: SAMEORIGIN

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Referrer-Policy: strict-origin-when-cross-origin

Strict-Transport-Security (HSTS)

Content-Security-Policy: default-src 'self'

Permissions-Policy

Caching

▼

Cache images (1 year)

Cache CSS/JS (1 month)

Cache fonts (1 year)

Cache HTML (10 minutes)

Disable ETags (use Expires instead)

CORS

▼

Allow all origins (*)

Specific origin

Allow credentials

Allow methods (GET, POST, PUT, DELETE, OPTIONS)

Allow headers (Content-Type, Authorization)

Gzip Compression

▼

Enable gzip/deflate compression

Custom Error Pages

▼

404

403

500

Directory Listing & Hotlink Protection

▼

Disable directory listing

Enable hotlink protection for images

Your domain

IP Blocking

▼

Block IPs