# Apache / LiteSpeed. No URL rewriting is needed; API uses api.php?r=...
Options -Indexes
DirectoryIndex index.php
<IfModule mod_mime.c>
  AddType application/wasm .wasm
  AddType application/manifest+json .webmanifest
</IfModule>
<FilesMatch "^(?:\..*|_paths\.php)$">
  Require all denied
</FilesMatch>
<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set Referrer-Policy "no-referrer"
</IfModule>
# Enable HTTPS using the hosting panel. PHP additionally refuses non-HTTPS production API access.
