# Enable URL rewriting
RewriteEngine On

# Redirect to HTTPS
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=303,L]

# Rewrite all requests to index.php if not a file or directory
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ index.php?url=$1 [QSA,L]

# Add custom headers
<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "*.beeindia.gov.in, *.umon.in"
    Header always set Access-Control-Allow-Methods "GET,PUT,POST,DELETE,OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type"
    Header always set X-XSS-Protection "1; mode=block"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-Content-Type-Options "nosniff"
    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
    Header unset X-Powered-By
</IfModule>

# Remove server header
<IfModule mod_headers.c>
    Header unset Server
</IfModule>

# Set cache control for static content
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresDefault "access plus 365 days"
</IfModule>