# URNOVA Banking — production Apache rules
Options -Indexes
DirectoryIndex index.php

<IfModule mod_headers.c>
  Header set X-Frame-Options "SAMEORIGIN"
  Header set X-Content-Type-Options "nosniff"
  Header set Referrer-Policy "strict-origin-when-cross-origin"
  Header set Permissions-Policy "geolocation=(), microphone=(), camera=()"
</IfModule>

<IfModule mod_rewrite.c>
  RewriteEngine On

  RewriteRule ^(config|sql|storage|includes)/ - [F,L]
  RewriteRule (^|/)\. - [F,L]
</IfModule>

<FilesMatch "\.(sql|lock|log)$">
  Require all denied
</FilesMatch>

<Files "env.php">
  Require all denied
</Files>
