# Apache privacy/search-engine hardening for this directory.
Options -Indexes
<IfModule mod_headers.c>
  Header always set X-Robots-Tag "noindex, nofollow, noarchive, nosnippet, noimageindex"
  Header always set Referrer-Policy "no-referrer"
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

# Optional stronger protection: enable HTTP Basic Auth in your hosting panel
# or uncomment/configure the lines below with a server-side .htpasswd file.
# AuthType Basic
# AuthName "Private Till Counter"
# AuthUserFile /absolute/server/path/to/.htpasswd
# Require valid-user
