# Yochi Email - .htaccess Configuration

# Disable directory browsing
Options -Indexes

# Error pages (use relative paths)
ErrorDocument 403 /index.php
ErrorDocument 404 /index.php

# Protect log files
<FilesMatch "\.(txt|log)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>

# Protect README
<Files "README.md">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</Files>

# PHP settings (removed - use php.ini or .user.ini instead)
# If needed, create a php.ini or .user.ini file with:
# display_errors = Off
# log_errors = On
# error_log = logs/php_errors.log

# Security headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set X-XSS-Protection "1; mode=block"
</IfModule>

# Prevent access to sensitive files
<FilesMatch "^\.">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>
