# =====================================================================
#  Pengaman Treasurer (dibaca Apache/LiteSpeed — XAMPP & cPanel)
# =====================================================================

# Jangan tampilin daftar isi folder kalau gak ada index.php
Options -Indexes

# Blokir file rahasia & file yang gak perlu diakses pengunjung:
# .env, .env.example, .htaccess, .gitignore, file .sql, README
<FilesMatch "^(\.env.*|\.htaccess|\.gitignore|.*\.sql|README\.md)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>
