RewriteEngine on

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule . index.php

RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [E=HTTP_AUTHORIZATION:%1]


# <IfModule mod_headers.c>
#   Header always set X-Content-Type-Options "nosniff"
#   <FilesMatch "\.(php|html)$">
#     Header set X-Frame-Options "SAMEORIGIN"
#     Header set X-XSS-Protection "1; mode=block"
#     Header set Strict-Transport-Security "max-age=63072000" env=HTTPS
#     Header set Referrer-Policy "same-origin"
#     Header set Feature-Policy "autoplay 'self'; camera 'self'; cookie 'self'"
#     Header set Permissions-Policy "camera=(), document-domain=()"
#   </FilesMatch>
# </IfModule>
