# Enable URL rewriting
RewriteEngine On

# Redirect www to non-www
RewriteCond %{HTTP_HOST} ^www\.downloadyoutubethumbnail4k\.com [NC]
RewriteRule ^(.*)$ https://downloadyoutubethumbnail4k.com/$1 [L,R=301]

# Redirect HTTP to HTTPS
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [L,R=301]

# Prevent directory listing
Options -Indexes

# Block access to hidden files like .htaccess, .git, .env
<FilesMatch "^\.">
  Require all denied
</FilesMatch>

# Protect from suspicious query strings (basic injection protection)
<IfModule mod_rewrite.c>
  RewriteCond %{QUERY_STRING} (\.\./|\.\.\\|etc/passwd|boot\.ini) [NC,OR]
  RewriteCond %{QUERY_STRING} (select|insert|union|drop|delete|update) [NC]
  RewriteRule .* - [F]
</IfModule>

# Allow indexing and following for search engines (optional but safe)
<IfModule mod_headers.c>
  Header set X-Robots-Tag "index, follow"
</IfModule>

# GZip compression for better performance
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html
  AddOutputFilterByType DEFLATE text/css
  AddOutputFilterByType DEFLATE text/javascript
  AddOutputFilterByType DEFLATE application/javascript
  AddOutputFilterByType DEFLATE application/json
  AddOutputFilterByType DEFLATE application/xml
  AddOutputFilterByType DEFLATE font/woff
  AddOutputFilterByType DEFLATE font/woff2
  AddOutputFilterByType DEFLATE image/svg+xml
</IfModule>

# Optional: Set caching for performance and SEO Core Web Vitals boost
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/html "access plus 1 hour"
  ExpiresByType text/css "access plus 1 week"
  ExpiresByType application/javascript "access plus 1 week"
  ExpiresByType image/jpeg "access plus 1 month"
  ExpiresByType image/png "access plus 1 month"
  ExpiresByType image/webp "access plus 1 month"
  ExpiresByType image/svg+xml "access plus 1 month"
</IfModule>
