# SAI — Apache configuration

# Default document
DirectoryIndex index.php

# Do not expose folder listings
Options -Indexes

# Block direct access to app internals (only index/login/logout/install are entry points)
RedirectMatch 403 ^.*/app/.*$
RedirectMatch 403 ^.*/config/.*$
RedirectMatch 403 ^.*/storage/.*$
RedirectMatch 403 ^.*/schema/.*$

# Sensible security headers
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

# UTF-8 by default
AddDefaultCharset UTF-8
