# Portal Pendaftaran Subdomain
Options -Indexes
DirectoryIndex index.php

# Jangan pernah menyajikan file konfigurasi/database mentah
<FilesMatch "\.(sqlite3|sqlite|db|json|log|ini)$">
    Require all denied
</FilesMatch>

<Files "config.php">
    Require all denied
</Files>

# Header keamanan dasar
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "DENY"
    Header set Referrer-Policy "same-origin"
</IfModule>
