# ==============================================================================
# eJobs360 Backend (.htaccess for cPanel Python / Passenger)
# ==============================================================================

# 1. Force HTTPS
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# 2. Serve static and media files directly through Apache for high performance
RewriteCond %{REQUEST_URI} ^/static/
RewriteRule ^static/(.*)$ /staticfiles/$1 [L]

RewriteCond %{REQUEST_URI} ^/media/
RewriteRule ^media/(.*)$ /media/$1 [L]

# 3. Security Headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "DENY"
    Header set X-XSS-Protection "1; mode=block"
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS"
    Header set Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With, X-Refresh-Jti"
</IfModule>

# 4. Phusion Passenger WSGI settings (cPanel Python App)
<IfModule mod_passenger.c>
    PassengerAppRoot /home/%{USER}/api.ejobs360.com
    PassengerBaseURI /
    PassengerPython /home/%{USER}/virtualenv/api.ejobs360.com/3.11/bin/python
    PassengerAppType wsgi
    PassengerStartupFile passenger_wsgi.py
</IfModule>
