RewriteEngine On RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] RewriteOptions inherit RewriteEngine on Header set content-Security-Policy: upgrade-insecure-requests