# ---------- Gizmos User Build HTTPS enforcement ----------
RewriteEngine On

# Preserve API methods and POST bodies while redirecting HTTP to HTTPS.
# HTTPS headers from Cloudflare/reverse proxies are respected.
RewriteCond %{HTTPS} !=on
RewriteCond %{HTTP:X-Forwarded-Proto} !^https$ [NC]
RewriteCond %{HTTP:CF-Visitor} !https [NC]
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=308,L,NE]

<IfModule mod_headers.c>
    Header always set Strict-Transport-Security "max-age=31536000"
</IfModule>
# ---------- End Gizmos User Build HTTPS enforcement ----------

Options -Indexes

# Block direct access to hidden files and database files.
<FilesMatch "(^\.|\.(db|sqlite|sqlite3)$)">
    Require all denied
</FilesMatch>
