# Suivi des ventes Clim-split
Options -Indexes
DirectoryIndex index.php

# Fichiers sensibles inaccessibles depuis le web
<FilesMatch "^(config\.php|config\.sample\.php|LISEZMOI\.txt)$">
    Require all denied
</FilesMatch>

# Forcer HTTPS
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{HTTPS} !=on
    RewriteCond %{HTTP:X-Forwarded-Proto} !=https
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</IfModule>

<IfModule mod_headers.c>
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-Content-Type-Options "nosniff"
    Header always set Referrer-Policy "same-origin"
    Header always set X-Robots-Tag "noindex, nofollow"
</IfModule>
