update ACAO (Access-Control-Allow-Origin) header + prevent hotlinking images

static/.htaccess

@@ -1,16 +1,15 @@
-Header set Access-Control-Allow-Origin https://oe7drt.com
-Vary: Origin
+Header set Access-Control-Allow-Origin: https://oe7drt.com
+Header set Vary: Origin
+
+RewriteEngine On
+RewriteCond %{REQUEST_URI} !hotlinked\.png$
+RewriteCond "%{HTTP_REFERER}" "!^$"
+RewriteCond "%{HTTP_REFERER}" "!oe7drt.com" [NC]
+RewriteRule "\.(gif|jpg|png)$"    "https://oe7drt.com/hotlinked.png"   [R,L]
+
+#SetEnvIf Referer "oe7drt\.com" localreferer
+#SetEnvIf Referer ^$ localreferer
+#<FilesMatch "\.(jpg|png|gif)$">
+#    Require env localreferer
+#</FilesMatch>
 
-# RewriteEngine  on
-#
-# Redirect permanent "/blog" "/posts"
-# Redirect permanent "/amateur-radio" "/posts"
-# Redirect permanent "/computerstuff" "/posts"
-#
-# Redirect permanent "posts/2022-07-10-raspberry-pi-4-64-bit-dual_hat-hotspot/" "/posts/2022-07-10-raspberry-pi-4-64bit-dual-hat-hotspot-without-pi-star/"
-# Redirect permanent "/posts/2022-08-07-using-nfs-shares-on-a-raspberry-pi/" "/posts/2022-08-07-using-nfs-on-a-raspberry-pi/"
-# Redirect permanent "/equipment/transceiver/yaesu-fd891/" "/equipment/transceiver/yaesu-ft891/"
-# Redirect permanent "/posts/2020-01-27-aprs-with-the-hytera-pd785g/" "/posts/2020-01-27-aprs-with-hytera-pd785g-v9/"
-# Redirect permanent "/2022-01-06-the-new-site-layout-and-theme/" "/posts/2022-01-06-site-updates/"
-# Redirect permanent "/posts/2020-11-14-operating-the-z-shell/" "/posts/2020-11-15-operating-the-z-shell/"
-# Redirect permanent "/posts/2021-10-03-running-winlink-and-vara-on-linux/" "/posts/2021-10-03-winlink-and-vara-on-linux/"