htaccess Generator

Generated .htaccess

# Generated by StacckApp .htaccess Generator

# https://stacckapp.com/htaccessgen

# --- Disable Directory Listing ---
Options -Indexes

# --- Custom Error Pages ---
ErrorDocument 404 /404.html

# --- Protect Sensitive Files ---
<FilesMatch "^(\.env|\.git.*|composer\.json|composer\.lock|package\.json|package-lock\.json|yarn\.lock|\.htaccess|\.htpasswd)$">
    Require all denied
</FilesMatch>

# --- URL Rewriting ---
<IfModule mod_rewrite.c>
    RewriteEngine On

    # Force HTTPS
    RewriteCond %{HTTPS} off
    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</IfModule>

# --- GZip Compression ---
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/html
    AddOutputFilterByType DEFLATE text/plain
    AddOutputFilterByType DEFLATE text/xml
    AddOutputFilterByType DEFLATE text/css
    AddOutputFilterByType DEFLATE application/javascript
    AddOutputFilterByType DEFLATE application/x-javascript
    AddOutputFilterByType DEFLATE application/json
    AddOutputFilterByType DEFLATE application/xml
    AddOutputFilterByType DEFLATE application/rss+xml
    AddOutputFilterByType DEFLATE image/svg+xml
</IfModule>

# --- Browser Caching (Expires) ---
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresDefault "access plus 1 month"
    ExpiresByType text/html "access plus 0 seconds"
    ExpiresByType text/css "access plus 1 month"
    ExpiresByType application/javascript "access plus 1 month"
    ExpiresByType image/jpeg "access plus 1 year"
    ExpiresByType image/png "access plus 1 year"
    ExpiresByType image/gif "access plus 1 year"
    ExpiresByType image/webp "access plus 1 year"
    ExpiresByType image/svg+xml "access plus 1 year"
    ExpiresByType font/woff2 "access plus 1 year"
</IfModule>

<IfModule mod_headers.c>
    <FilesMatch "\.(css|js|jpe?g|png|gif|webp|svg|woff2?)$">
        Header set Cache-Control "max-age=2592000, public"
    </FilesMatch>
</IfModule>

59 lines · 1930 chars

About htaccess Generator

Switch on the options you need, such as forcing HTTPS, adding or removing www, enabling gzip compression, setting browser cache headers, defining a custom 404 page, or blocking hotlinked images. The tool assembles the matching Apache directives into a complete .htaccess file you can copy.

The file is built entirely in your browser, so nothing about your site configuration is uploaded. Place the generated file in the document root of an Apache server with mod_rewrite enabled to apply the rules, and review each block before deploying to a production site.

Frequently asked questions

Where do I put the .htaccess file?

Place it in the root directory of your website, or in a subdirectory if you want the rules to apply only there.

Does .htaccess work on Nginx?

No. The .htaccess format is specific to Apache; Nginx uses server-block configuration instead.

Why are my rewrite rules not working?

The server usually needs mod_rewrite enabled and AllowOverride set to permit .htaccess directives in that directory.