# ============================================================
#  NSA Proteção Veicular — .htaccess para cPanel / Apache
# ============================================================

# ----- Charset padrão -----
AddDefaultCharset UTF-8

# ----- MIME types para arquivos modernos -----
AddType image/webp                    .webp
AddType video/mp4                     .mp4
AddType image/svg+xml                 .svg
AddType application/font-woff2        .woff2

# ----- Redirecionar HTTP → HTTPS (ativar após instalar SSL) -----
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

# ----- Remover www (ou adicionar — escolha um) -----
# Remover www:
RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [R=301,L]

# ----- Página 404 personalizada (opcional) -----
# ErrorDocument 404 /404.html

# ----- Segurança: ocultar listagem de diretórios -----
Options -Indexes

# ----- Segurança: bloquear acesso a arquivos sensíveis -----
<FilesMatch "(^\.htaccess|\.htpasswd|\.git)">
  Order Allow,Deny
  Deny from all
</FilesMatch>

# ----- Cache do navegador (performance) -----
<IfModule mod_expires.c>
  ExpiresActive On

  # Imagens
  ExpiresByType image/png             "access plus 1 month"
  ExpiresByType image/jpeg            "access plus 1 month"
  ExpiresByType image/webp            "access plus 1 month"
  ExpiresByType image/svg+xml         "access plus 1 month"

  # Vídeos
  ExpiresByType video/mp4             "access plus 1 month"

  # HTML — sem cache agressivo (facilita atualizações)
  ExpiresByType text/html             "access plus 1 hour"

  # CSS e JS
  ExpiresByType text/css              "access plus 1 week"
  ExpiresByType application/javascript "access plus 1 week"

  # Fontes
  ExpiresByType font/woff2            "access plus 6 months"
</IfModule>

# ----- Compressão GZIP (carregamento mais rápido) -----
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html
  AddOutputFilterByType DEFLATE text/css
  AddOutputFilterByType DEFLATE application/javascript
  AddOutputFilterByType DEFLATE image/svg+xml
</IfModule>

# ----- Headers de segurança -----
<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
