Options -Indexes
DirectoryIndex index.php

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "DENY"
  Header always set Referrer-Policy "same-origin"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

<FilesMatch "^(config.*\.php|database\.sql)$">
  Require all denied
</FilesMatch>

<FilesMatch "\.(css|js|webmanifest|svg|png)$">
  Header set Cache-Control "public, max-age=604800"
</FilesMatch>

<Files "sw.js">
  Header set Cache-Control "no-cache, no-store, must-revalidate"
</Files>
