.htaccess Generator v2

🔗 Redirects

Redirect Entries (from → to → status)

🔄 URL Rewriting

Rewrite Engine Force HTTPS Force www Custom Rewrite Rules (one per line: pattern → substitution)

🔒 Authentication

Auth Type Auth Name (realm) Auth User File (path to .htpasswd) Require Allow/Deny

⏰ Caching

Cache Strategy Default Expiry Images Expiry CSS/JS Expiry Fonts Expiry Disable ETags (recommended)

📥 Compression

Enable GZIP Compression Enable Deflate Additional MIME types to compress (one per line)

🛡 Security Headers

X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security

HSTS max-age (seconds)

Content-Security-Policy Permissions-Policy Server Signature Off Disable Directory Listing Block Access to Hidden Files Block WordPress Attack Vectors Protect Includes

⚠ Error Pages

Custom Error Pages (code → path)

📄 MIME Types

Default UTF-8 Charset Custom MIME Types (extension → type, one per line) Force SVG correct type Add Web Font types Add Video types