# ============================================================
#  SimKlinik — Konfigurasi keamanan Apache
# ============================================================

# Nonaktifkan directory listing
Options -Indexes

# Sembunyikan file sensitif
<FilesMatch "\.(sql|md|lock|env)$">
    Require all denied
</FilesMatch>

# Blokir akses langsung ke folder internal
RewriteEngine On
RewriteRule ^(config|includes|database)/ - [F,L]

# File ini tidak pernah disajikan ke publik
<Files "config.php">
    Require all denied
</Files>
