# LAWRENTGG — .htaccess untuk public_html (cPanel)
# Memastikan domain langsung membuka website + optimasi dasar

# Halaman default saat domain dibuka
DirectoryIndex index.html login.html

# Paksa HTTPS (aktifkan setelah SSL terpasang via AutoSSL/Let's Encrypt di cPanel)
# RewriteEngine On
# RewriteCond %{HTTPS} off
# RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

# Kompresi teks (loading lebih cepat, bagus untuk SEO)
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/css application/javascript application/json image/svg+xml
</IfModule>

# Cache asset statis
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/css "access plus 7 days"
  ExpiresByType application/javascript "access plus 7 days"
  ExpiresByType image/svg+xml "access plus 30 days"
  ExpiresByType image/webp "access plus 30 days"
</IfModule>

# Security headers
<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
  Header set X-Frame-Options "SAMEORIGIN"
  Header set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

# Blok akses file sensitif
<FilesMatch "\.(env|py|db|log)$">
  Require all denied
</FilesMatch>
