lggr/.htaccess

Options -indexes

#Header always set Strict-Transport-Security "max-age=31536000"

#Header always set Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; report-uri https://report-uri.io/report/e7e84fa898ae6e0d0e8d70e25cd237c7;"

<Files stats.php>
# Chart.js uses some dynamic functions.
Header always set Content-Security-Policy "default-src 'self' ; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; report-uri https://report-uri.io/report/e7e84fa898ae6e0d0e8d70e25cd237c7;"
</Files>

ExpiresActive	On
ExpiresByType	text/css		"access plus 1 month"
ExpiresByType	image/png		"access plus 1 month"
ExpiresByType	application/javascript	"access plus 1 month"

AuthType	Basic
AuthName	"Restricted Area"
AuthUserFile	/var/www/webuser
Require		valid-user
Require		ip 127.0.0.1
Require		ip ::1