Tricks

.htaccess

Options All -ExecCGI -Indexes -Includes +FollowSymLinks
# php_flag display_errors on

# 401-auth
AuthType Basic
AuthName "Thats protected Area!"
AuthUserFile /usr/host/mysite/.htpasswd # https://htmlweb.ru/service/htpasswd.php - generator
Require valid-user

RewriteEngine On
RewriteBase /

# Access deny dot files
RedirectMatch 403 /\..*$

# Redirect from www to whitout www
RewriteCond %{HTTP_HOST} ^www\.(.+) [NC]
RewriteRule .* https://%1/$0 [L,R=301]

# Redirect from without www to www
RewriteCond %{HTTP_HOST} ^([^www].*)$
RewriteRule ^(.*)$ http://www.%1/$1 [L,R=301]

# Redirect from http to https
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Access Deny
Order allow,deny
Deny from all