<?xml version=“1.0” encoding=“UTF-8”?> <configuration>

<system.web>
    <customErrors mode="On"/>
</system.web>
<system.webServer>
    <rewrite>
        <rules>
            <rule name="HTTP to HTTPS redirect" stopProcessing="true">
                <match url="(.*)" />
                <conditions>
                    <add input="{HTTPS}" pattern="off" ignoreCase="true" />
                </conditions>
                <action type="Redirect" url="https://{HTTP_HOST}/{R:1}"
                    redirectType="Permanent" />
            </rule>
            <rule name="Remove trailing slash" stopProcessing="true">
            <match url="(.*)/$" />
            <conditions>
                <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
                <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
            </conditions>
            <action type="Redirect" redirectType="Permanent" url="{R:1}" />
            </rule>    
            <rule name="RewriteHtml">
                <match url="^(.*)$" />
                <conditions logicalGrouping="MatchAll">
                    <add input="{REMOTE_PORT}" pattern=".*" />
                    <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
                    <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
                </conditions>
                <action type="Rewrite" url="{R:1}.html" />
            </rule>              
        </rules>
        <outboundRules>
            <rule name="Add Strict-Transport-Security when HTTPS" enabled="true">
                <match serverVariable="RESPONSE_Strict_Transport_Security"
                    pattern=".*" />
                <conditions>
                    <add input="{HTTPS}" pattern="on" ignoreCase="true" />
                </conditions>
                <action type="Rewrite" value="max-age=31536000" />
            </rule>
        </outboundRules>
    </rewrite>
    <httpErrors defaultPath="/assets/misc/general-glitch" defaultResponseMode="Redirect"></httpErrors>
    <runtime>
        <environmentVariables>
            <add name="SCM_COMMAND_IDLE_TIMEOUT" value="600" />
        </environmentVariables>
    </runtime>
    <httpCompression>
        <dynamicTypes>
            <add enabled="true" mimeType="application/json"/>
        </dynamicTypes>
        <staticTypes>
            <add enabled="true" mimeType="text/*" />
            <add enabled="true" mimeType="image/svg+xml" />
            <add enabled="true" mimeType="application/atom+xml"/>
            <add enabled="true" mimeType="application/javascript" />
            <add enabled="true" mimeType="application/json"/>
            <add enabled="false" mimeType="*/*"/>
        </staticTypes>
    </httpCompression>
    <urlCompression doStaticCompression="true" />
    <staticContent>
        <remove fileExtension=".css" />
        <mimeMap fileExtension=".css" mimeType="text/css; charset=UTF-8" />
        <remove fileExtension=".js" />
        <mimeMap fileExtension=".js" mimeType="text/javascript; charset=UTF-8" />
        <remove fileExtension=".json" />
        <mimeMap fileExtension=".json" mimeType="application/json; charset=UTF-8" />
        <remove fileExtension=".rss" />
        <mimeMap fileExtension=".rss" mimeType="application/rss+xml; charset=UTF-8" />
        <remove fileExtension=".html" />
        <mimeMap fileExtension=".html" mimeType="text/html; charset=UTF-8" />
        <remove fileExtension=".woff"/>
        <mimeMap fileExtension=".woff" mimeType="application/x-font-woff"/>
        <remove fileExtension=".woff2"/>
        <mimeMap fileExtension=".woff2" mimeType="application/x-font-woff"/>
        <mimeMap fileExtension=".mp4" mimeType="video/mp4" />
        <mimeMap fileExtension=".webm" mimeType="video/webm" />
        <mimeMap fileExtension=".ogv" mimeType="video/ogg" />
        <clientCache cacheControlCustom="public" cacheControlMode="UseMaxAge" cacheControlMaxAge="12.00:00:00"/>
    </staticContent>
    <httpProtocol>
        <customHeaders>
            <add name="Arr-Disable-Session-Affinity" value="true"/>
            <remove name="X-Content-Type-Options"/>
            <add name="X-Content-Type-Options" value="nosniff"/>
            <remove name="X-Frame-Options"/>
            <add name="X-Frame-Options" value="SAMEORIGIN" />
            <remove name="X-Powered-By"/>
            <add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains; preload" />
            <add name="X-XSS-Protection" value="1; mode=block" />
        </customHeaders>
    </httpProtocol>
    <caching enabled="true" enableKernelCache="true">
        <profiles>
            <add extension=".html" policy="CacheForTimePeriod" kernelCachePolicy="CacheForTimePeriod" duration="14:00:00:00"/>
            <add extension=".css" policy="CacheForTimePeriod" kernelCachePolicy="CacheForTimePeriod" duration="14:00:00:00"/>
            <add extension=".js" policy="CacheForTimePeriod" kernelCachePolicy="CacheForTimePeriod" duration="14:00:00:00"/>
        </profiles>
    </caching>
</system.webServer>

</configuration>