# Works at the domain root or in a cPanel subdirectory. No URL rewriting required.
<IfModule mod_autoindex.c>
 Options -Indexes
</IfModule>
<IfModule mod_authz_core.c>
 <FilesMatch "(^\.|^config\.php$|\.(?:sqlite|sqlite3|db|json|jsonl|log|key|lock|tmp|bak|md|zip)$)">
  Require all denied
 </FilesMatch>
</IfModule>
<IfModule !mod_authz_core.c>
 <FilesMatch "(^\.|^config\.php$|\.(?:sqlite|sqlite3|db|json|jsonl|log|key|lock|tmp|bak|md|zip)$)">
  Order allow,deny
  Deny from all
 </FilesMatch>
</IfModule>
<IfModule mod_headers.c>
 Header always set X-Content-Type-Options "nosniff"
 Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
<IfModule mod_deflate.c>
 AddOutputFilterByType DEFLATE text/html text/css application/javascript application/json text/javascript
</IfModule>
