Redirects & HTTPS

Force HTTPS Redirect non-www → www Redirect www → non-www Remove trailing slash

Performance

Enable Gzip compression Browser caching (1 month) Disable ETags

Security headers (XSS, nosniff, frame) Disable directory listing Block access to .htaccess/.env Block hotlinking

Your domain (for hotlink rule)

Custom 404 page Custom 403 page Custom 500 page