DirectoryIndex index.html
Options -Indexes

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

<FilesMatch "^(cron\.php)$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set Referrer-Policy "same-origin"
  Header always set X-Content-Type-Options "nosniff"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

<FilesMatch "\.(js|css|html)$">
  Header set Cache-Control "no-cache"
</FilesMatch>
<FilesMatch "\.woff2$">
  Header set Cache-Control "public, max-age=31536000"
</FilesMatch>
