web.config redirect http to https

web.config

<!-- requires url rewrite module --->
<!-- https://docs.microsoft.com/en-us/archive/blogs/dawiese/redirect-from-http-to-https-using-the-iis-url-rewrite-module -->

<system.webServer>
    <rewrite>
        <rules>
            <rule name="Redirect http to https" patternSyntax="Wildcard" stopProcessing="true">
                <match url="*" />
                <conditions>
                    <add input="{HTTPS}" pattern="off" />
                </conditions>
                <action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" redirectType="Found" />
            </rule>
        </rules>
    </rewrite
</system.webServer>

<!-- hiding version numbers -->
<!-- https://www.saotn.org/remove-iis-server-version-http-response-header/ -->
<!-- within system.webServer -->
<rewrite>    
  <outboundRules rewriteBeforeCache="true">
    <rule name="Remove Server header">
      <match serverVariable="RESPONSE_Server" pattern=".+" />
      <action type="Rewrite" value="" />
    </rule>
  </outboundRules>
</rewrite>
  
<!-- within system.webServer -->
<httpProtocol>
  <customHeaders>
    <remove name="X-Powered-By" />
  </customHeaders>
</httpProtocol>

<!-- within system.web --> 
<httpRuntime
  enableVersionHeader="false" />