Release v4.1.0

Author: LeoColomb

CHANGELOG.md

@@ -1,3 +1,13 @@
+### 4.1.0 (January 5, 2021)
+
+* Add mime-type `image/avif` and `image/avifs`
+  [[4ca46af](https://github.com/h5bp/server-configs-apache/commit/4ca46af2dc9791699221ea9e274d46ffe275b061)]
+* Fix unexpected Content-Language in pre-compressed Brotli
+  [[1f5641d](https://github.com/h5bp/server-configs-apache/commit/1f5641d702b05b92c15a60a7c98d5090f03789dd)]
+* Added `systemd` module to support CentOS
+  [[5d060b0](https://github.com/h5bp/server-configs-apache/commit/5d060b0f562dbde5f3f15cc2a250f9d2bc10fb84)]
+* Improve inline comments.
+
 ### 4.0.0 (April 14, 2020)
 
 * 🎉 Server-level config! Support httpd configuration at main server level.

dist/.htaccess

@@ -1,4 +1,4 @@
-# Apache Server Configs v4.0.0 | MIT License
+# Apache Server Configs v4.1.0 | MIT License
 # https://github.com/h5bp/server-configs-apache
 
 # (!) Using `.htaccess` files slows down Apache, therefore, if you have
@@ -43,7 +43,7 @@
 
 <IfModule mod_setenvif.c>
     <IfModule mod_headers.c>
-        <FilesMatch "\.(bmp|cur|gif|ico|jpe?g|a?png|svgz?|webp)$">
+        <FilesMatch "\.(avifs?|bmp|cur|gif|ico|jpe?g|a?png|svgz?|webp)$">
             SetEnvIf Origin ":" IS_CORS
             Header set Access-Control-Allow-Origin "*" env=IS_CORS
         </FilesMatch>
@@ -180,6 +180,8 @@ Options -MultiViews
 
     AddType audio/mp4                                   f4a f4b m4a
     AddType audio/ogg                                   oga ogg opus
+    AddType image/avif                                  avif
+    AddType image/avif-sequence                         avifs
     AddType image/bmp                                   bmp
     AddType image/svg+xml                               svg svgz
     AddType image/webp                                  webp
@@ -479,7 +481,7 @@ AddDefaultCharset utf-8
 # Mitigate the risk of cross-site scripting and other content-injection
 # attacks.
 #
-# This can be done by setting a `Content Security Policy` which whitelists
+# This can be done by setting a Content Security Policy which permits
 # trusted sources of content for your website.
 #
 # There is no policy that fits all websites, you will have to modify the
@@ -682,9 +684,9 @@ AddDefaultCharset utf-8
 #     web browsers.
 #
 #     The filter is usually enabled by default, but in some cases, it may be
-#     disabled by the user. However, in Internet Explorer, for example, it can be
-#     re-enabled just by sending the  `X-XSS-Protection` header with the value
-#     of `1`.
+#     disabled by the user. However, in Internet Explorer, for example, it can
+#     be re-enabled just by sending the `X-XSS-Protection` header with the
+#     value of `1`.
 #
 # (2) Prevent web browsers from rendering the web page if a potential reflected
 #     (a.k.a non-persistent) XSS attack is detected by the filter.
@@ -903,7 +905,10 @@ ServerSignature Off
 # (!) To make this part relevant, you need to generate encoded files by your
 #     own. Enabling this part will not auto-generate brotlied files.
 #
-# Note that some clients (eg. browsers) require a secure connection to request
+# (1) Remove default Content-Language header added for .br files.
+#     https://httpd.apache.org/docs/current/mod/mod_mime.html#multipleext
+#
+# Note that some clients (e.g. browsers) require a secure connection to request
 # brotli-compressed resources.
 # https://www.chromestatus.com/feature/5420797577396224
 #
@@ -921,6 +926,9 @@ ServerSignature Off
 #     <FilesMatch "\.br$">
 
 #         <IfModule mod_mime.c>
+#             # (1)
+#             RemoveLanguage .br
+
 #             # Serve correct content types
 #             AddType text/css              css.br
 #             AddType text/calendar         ics.br
@@ -1125,6 +1133,8 @@ FileETag None
 
     ExpiresByType audio/ogg                             "access plus 1 month"
     ExpiresByType image/apng                            "access plus 1 month"
+    ExpiresByType image/avif                            "access plus 1 month"
+    ExpiresByType image/avif-sequence                   "access plus 1 month"
     ExpiresByType image/bmp                             "access plus 1 month"
     ExpiresByType image/gif                             "access plus 1 month"
     ExpiresByType image/jpeg                            "access plus 1 month"
@@ -1220,6 +1230,6 @@ FileETag None
 # <IfModule mod_rewrite.c>
 #     RewriteEngine On
 #     RewriteCond %{REQUEST_FILENAME} !-f
-#     RewriteRule ^(.+)\.(\w+)\.(bmp|css|cur|gif|ico|jpe?g|m?js|a?png|svgz?|webp|webmanifest)$ $1.$3 [L]
+#     RewriteRule ^(.+)\.(\w+)\.(avifs?|bmp|css|cur|gif|ico|jpe?g|m?js|a?png|svgz?|webp|webmanifest)$ $1.$3 [L]
 # </IfModule>
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "apache-server-configs",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "author": "The H5BP Team",
   "description": "Boilerplate configurations for the Apache HTTP server",
   "repository": "h5bp/server-configs-apache",