Tools

.htaccess Generator

Pick the rules you need and get an Apache .htaccess file: HTTPS and www redirects, CORS, cache headers, directory listing, IP blocks and custom error pages. Every option is seedable from the URL, e.g. ?https_redirect=yes&cors=yes .

Rules

Force HTTPS

Redirects every plain-HTTP request to the https:// equivalent.

Disable directory listing

Emits Options -Indexes, so a folder with no index file returns 403 instead of a file list.

Enable CORS

Allow-Origin *, plus the usual methods and headers. Loosen or tighten before shipping.

Cache headers

mod_expires rules: a year for images and fonts, a month for CSS and JS.

Canonical host

Pick one. Redirecting to www and to non-www at the same time is a loop.

Custom redirect

From (regex path)

Status

RewriteBase

Access and errors

Blocked IPs

Comma-separated. Addresses or CIDR ranges; Apache 2.4 syntax.

404 page

500 page

.htaccess

# Generated .htaccess

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /

    # Force HTTPS
    RewriteCond %{HTTPS} off
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

</IfModule>

# Disable directory listing
Options -Indexes

<IfModule mod_headers.c>
    # Enable CORS
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE"
    Header set Access-Control-Allow-Headers "Content-Type, Authorization"
</IfModule>

<IfModule mod_expires.c>
    # Cache headers
    ExpiresActive On
    ExpiresByType image/jpg "access plus 1 year"
    ExpiresByType image/jpeg "access plus 1 year"
    ExpiresByType image/png "access plus 1 year"
    ExpiresByType image/webp "access plus 1 year"
    ExpiresByType image/gif "access plus 1 year"
    ExpiresByType image/svg+xml "access plus 1 year"
    ExpiresByType text/css "access plus 1 month"
    ExpiresByType application/javascript "access plus 1 month"
    ExpiresByType application/x-font-woff "access plus 1 year"
    ExpiresByType font/woff2 "access plus 1 year"
</IfModule>

Downloads as htaccess.txt — browsers refuse to save dotfiles. Rename it to .htaccess in your web root.

.htaccess Generator

Related Tools