# Maslow Data Room — app folder rules
Options -Indexes

# Never serve secrets, database files, docs or logs
<FilesMatch "\.(sqlite|sqlite3|db|log|md|ini|bak)$">
  Require all denied
</FilesMatch>
<Files "config.local.php">
  Require all denied
</Files>

# Correct MIME for ES modules
AddType text/javascript .mjs

# No caching of app pages
<FilesMatch "\.php$">
  Header set Cache-Control "private, no-store"
</FilesMatch>
