Enforce HTTPS in .htaccess

2019-08-25 17:10:26 +02:00
parent dc289877f1
commit 05778a3cae
1 changed files with 6 additions and 1 deletions
@@ -21,7 +21,12 @@ RewriteEngine on
 #
 RewriteBase /

-# Rewrite OpenID clients to YADIS file
+# enforce HTTPS
+RewriteCond %{HTTPS} !=on
+RewriteCond %{ENV:HTTPS} !=on
+RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
+
+# rewrite OpenID clients to YADIS file
 RewriteCond %{HTTP_ACCEPT} ^application/xrds\+xml [NC]
 RewriteRule ^$ /yadis.xml [PT]