# 7D Project Hub
Options -Indexes

<IfModule mod_rewrite.c>
  RewriteEngine On
  # never serve code, dumps, docs or the CLI tools directly
  RewriteRule ^(inc|uploads|tools)/ - [F,L]
  RewriteRule ^.*\.(sql|md|sh|log|bak|ini)$ - [F,L]
  RewriteRule ^config\.php$ - [F,L]
  RewriteRule ^backups/ - [F,L]
</IfModule>

<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
  Header set X-Frame-Options "SAMEORIGIN"
  Header set Referrer-Policy "same-origin"
  Header always set Strict-Transport-Security "max-age=15552000" env=HTTPS
  # ນະໂຍບາຍເນື້ອຫາ — ແອັບຕັ້ງເອງທຸກໜ້າຢູ່ແລ້ວ ອັນນີ້ຄຸ້ມເຖິງໄຟລ໌ static ນຳ
  Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none'"
  Header set Permissions-Policy "geolocation=(), camera=(), microphone=(), payment=()"
</IfModule>

<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/css "access plus 7 days"
  ExpiresByType application/javascript "access plus 7 days"
</IfModule>
