# Parent .htaccess — keep this minimal. LiteSpeed on this shared host rejects
# <FilesMatch> regex blocks and Require directives. Per-directory protection
# for src/, vendor/, migrations/, logs/ is handled by their own .htaccess files.

Options -Indexes

<Files ".env">
    Order deny,allow
    Deny from all
</Files>

<Files ".env.example">
    Order deny,allow
    Deny from all
</Files>

<Files "composer.json">
    Order deny,allow
    Deny from all
</Files>

<Files "composer.lock">
    Order deny,allow
    Deny from all
</Files>

<Files "README.md">
    Order deny,allow
    Deny from all
</Files>

<Files ".htaccess">
    Order deny,allow
    Deny from all
</Files>

<Files ".gitignore">
    Order deny,allow
    Deny from all
</Files>