## DEFAULT .HTACESS RULES ##
# Tinfoil Hat Stuff
Options +Includes
Options +FollowSymLinks -Indexes
RewriteEngine on
# ultimate hotlink protection
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_FILENAME} \.(gif|jpeg|jpg|png)$ [NC]
RewriteCond %{HTTP_REFERER} !^https?://([^.]+\.)?example.com [NC]
RewriteRule \.(gif|jpeg|jpg|png)$ - [F,NC,L]
# Set Cache-Control and Expires headers
Header set Cache-Control "max-age=2592000, public"
Header set Cache-Control "max-age=604800, public"
Header set Cache-Control "max-age=604800, public"
Header set Cache-Control "max-age=216000, private, must-revalidate"
Header set Cache-Control "max-age=7200, private, must-revalidate"
# Set Expires headers
ExpiresActive On
ExpiresDefault "access plus 1 year"
ExpiresByType text/html "access plus 1 second"
ExpiresByType image/gif "access plus 2592000 seconds"
ExpiresByType image/jpeg "access plus 2592000 seconds"
ExpiresByType image/jpg "access plus 2592000 seconds"
ExpiresByType image/png "access plus 2592000 seconds"
ExpiresByType image/x-icon "access plus 2592000 seconds"
ExpiresByType text/css "access plus 604800 seconds"
ExpiresByType text/javascript "access plus 604800 seconds"
ExpiresByType application/javascript "access plus 604800 seconds"
ExpiresByType application/x-javascript "access plus 604800 seconds"