RewriteEngine On RewriteCond %{ENV:HTTPS} !on RewriteRule ^.*$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] Header always set Content-Security-Policy "upgrade-insecure-requests;" RewriteCond %{HTTP_HOST} !^$ RewriteCond %{HTTP_HOST} !^www\. [NC] RewriteCond %{HTTP_HOST} (.+)$ RewriteRule ^(.*)$ https://www.%1/$1 [R=301,L] . RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^(.*)$ index.php?q=$1 [L,QSA]