.htaccess

RewriteEngine On
 # Force WWW
RewriteCond %{HTTP_HOST} ^brightlogic\.tech [NC]
RewriteRule (.*) https://www.brightlogic.tech/$1 [R=301,QSA,L]
 # Force HTTPS
RewriteCond %{HTTPS} !=on
RewriteRule (.*) https://www.brightlogic.tech/$1 [R=301,L]

Header always set Content-Security-Policy "default-src 'none'; style-src 'self' https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css; font-src 'self'; img-src 'self'; script-src 'none'; object-src 'none'; manifest-src 'self'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
Header always set X-XSS-Protection "1;mode=block"
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set Referrer-Policy "no-referrer"
Header always set X-Powered-By "brightlogic.tech"
Header always set Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
Header always set Expect-CT "enforce,max-age=2592000"