# Günce 4.8.2 — place this file inside the existing gunce folder.
DirectoryIndex index.php
Options -Indexes
<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "DENY"
  Header always set Referrer-Policy "same-origin"
  <FilesMatch "^(index\.php|sw\.js|manifest\.webmanifest)$">
    Header always set Cache-Control "no-cache, must-revalidate"
  </FilesMatch>
</IfModule>
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/css application/javascript application/json
</IfModule>
# DirectoryMatch is not valid in .htaccess; sensitive files are protected here.
<FilesMatch "(?i)(^config(?:\.example)?\.php$|\.(?:env|ini|log|sqlite(?:-wal|-shm)?|db|sql|bak|backup|lock|zip)$|^error_log$)">
  Require all denied
</FilesMatch>
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteCond %{HTTPS} off
  RewriteCond %{HTTP:X-Forwarded-Proto} !^https$ [NC]
  RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=302,L]
  # Keep existing extensionless control/API bookmarks working.
  RewriteRule ^(control|api|control-api)/?$ $1.php [L]
</IfModule>
