Options -Indexes Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "strict-origin-when-cross-origin" Header always set X-Frame-Options "DENY" ExpiresActive On ExpiresDefault "access plus 7 days" ForceType application/gzip ForceType application/zip