# Seeka — root .htaccess for cPanel/Apache shared hosting

# Never serve directory listings.
Options -Indexes

# Force HTTPS in production (uncomment once SSL is active on your domain).
# RewriteEngine On
# RewriteCond %{HTTPS} off
# RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Block access to dotfiles (.env, .git, etc.) and the raw schema file.
<FilesMatch "^\.">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order deny,allow
        Deny from all
    </IfModule>
</FilesMatch>
