Options -Indexes
DirectoryIndex index.php

# Protect sensitive files
<FilesMatch "^(schema\.sql|\.env)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Force HTTPS (uncomment after SSL is set up)
# RewriteEngine On
# RewriteCond %{HTTPS} off
# RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# PHP settings for LiteSpeed
<IfModule mod_php7.c>
    php_value upload_max_filesize 5M
    php_value post_max_size 5M
    php_value session.cookie_httponly 1
    php_value session.cookie_samesite Lax
</IfModule>
