RewriteEngine On RewriteCond %{HTTPS} !on RewriteRule /.* https://%{SERVER_NAME}$0 Header always set \ Strict-Transport-Security "max-age=63072000; includeSubDomains" Require all granted AllowOverride All Options FollowSymLinks MultiViews Dav off