# TienPYC E-Commerce Platform
# Configurado para XAMPP Local

Options -MultiViews -Indexes
RewriteEngine On
RewriteBase /tienda-tienpyc-v-api/

# Forzar HTTPS (descomentar en producción)
# RewriteCond %{HTTPS} off
# RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Bloquear acceso a archivos sensibles
<FilesMatch "^(config\.php|\.env|composer\.json|composer\.lock|package\.json)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Proteger carpetas sensibles
RewriteRule ^includes/ - [F,L]
RewriteRule ^logs/ - [F,L]
RewriteRule ^database/ - [F,L]

# Permitir acceso directo a webhooks
RewriteRule ^webhook/wompi$ webhook/wompi.php [L]
RewriteRule ^webhook/coinpal$ webhook/coinpal.php [L]

# Permitir acceso a archivos de instalación
RewriteRule ^(install|check_requirements)\.php$ - [L]

# Route all requests through index.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?route=$1 [QSA,L]

# Set default charset
AddDefaultCharset UTF-8

# ============================================
# OPTIMIZACIONES DE RENDIMIENTO
# ============================================

# Compresión GZIP
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript
    AddOutputFilterByType DEFLATE application/javascript application/x-javascript application/json
    AddOutputFilterByType DEFLATE application/xml application/xhtml+xml
    AddOutputFilterByType DEFLATE image/svg+xml
</IfModule>

# Caché del navegador
<IfModule mod_expires.c>
    ExpiresActive On
    
    # Imágenes - 1 mes
    ExpiresByType image/jpeg "access plus 1 month"
    ExpiresByType image/png "access plus 1 month"
    ExpiresByType image/gif "access plus 1 month"
    ExpiresByType image/webp "access plus 1 month"
    ExpiresByType image/svg+xml "access plus 1 month"
    ExpiresByType image/x-icon "access plus 1 year"
    
    # CSS y JavaScript - 1 semana
    ExpiresByType text/css "access plus 1 week"
    ExpiresByType application/javascript "access plus 1 week"
    ExpiresByType text/javascript "access plus 1 week"
    
    # Fuentes - 1 mes
    ExpiresByType font/woff2 "access plus 1 month"
    ExpiresByType font/woff "access plus 1 month"
    ExpiresByType application/font-woff "access plus 1 month"
    ExpiresByType application/font-woff2 "access plus 1 month"
    
    # HTML - sin caché (contenido dinámico)
    ExpiresByType text/html "access plus 0 seconds"
</IfModule>

# Headers de caché adicionales
<IfModule mod_headers.c>
    # Seguridad
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-XSS-Protection "1; mode=block"
    
    # Caché para archivos estáticos
    <FilesMatch "\.(ico|pdf|jpg|jpeg|png|gif|webp|js|css|woff|woff2)$">
        Header set Cache-Control "max-age=2592000, public"
    </FilesMatch>
    
    # Sin caché para PHP
    <FilesMatch "\.php$">
        Header set Cache-Control "no-cache, no-store, must-revalidate"
        Header set Pragma "no-cache"
        Header set Expires "0"
    </FilesMatch>
</IfModule>

# Keep-Alive para conexiones persistentes
<IfModule mod_headers.c>
    Header set Connection keep-alive
</IfModule>
