# Basic hardening for shared hosting

# Deny access to hidden files
<FilesMatch "^\.">
  Require all denied
</FilesMatch>

# Disable directory listing
Options -Indexes

# (Optional) Force HTTPS - uncomment if needed
# RewriteEngine On
# RewriteCond %{HTTPS} !=on
# RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
