# Apache 2.4: internal files must not be downloadable.
# Reachable from outside: list.php, get.php (signed links) and the admin page
# under the name set in config.php (S3D_ADMIN_FILE).
# Folders data/ and private/ are closed by their own .htaccess (created
# automatically on first use).
Options -Indexes
<FilesMatch "^(config|common|r2|hash)\.php$">
  Require all denied
</FilesMatch>
<FilesMatch "\.(log|json|lock|txt|tmp)$">
  Require all denied
</FilesMatch>
