# Infumia LTD — Apache rewrite kuralları (cPanel)
# Tüm istekleri index.php front controller'a yönlendirir.

<IfModule mod_rewrite.c>
    RewriteEngine On

    # setup.php'ye erişime izin ver (kurulum bitince silinmesi önerilir)
    RewriteRule ^setup\.php$ - [L]

    # Var olan gerçek dosyalara/dizinlere dokunma (css, js, img, upload vs.)
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^ - [L]

    # Geri kalan her şey front controller'a
    RewriteRule ^ index.php [QSA,L]
</IfModule>

# Dizin listelemeyi kapat
Options -Indexes

# charset
AddDefaultCharset UTF-8

# güvenlik başlıkları
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set Referrer-Policy "strict-origin-when-cross-origin"
    Header set X-XSS-Protection "1; mode=block"
</IfModule>

# UTF-8 olan PHP dosyalarından BOM'a izin verme, gzip et
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/html text/css text/javascript application/javascript application/json
</IfModule>

# cache
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css "access plus 7 days"
    ExpiresByType application/javascript "access plus 7 days"
    ExpiresByType image/png "access plus 30 days"
    ExpiresByType image/jpeg "access plus 30 days"
    ExpiresByType image/svg+xml "access plus 30 days"
    ExpiresByType image/webp "access plus 30 days"
</IfModule>
