# SiPustaka - Apache Configuration
Options -Indexes

# Protect config and includes
<FilesMatch "\.(php)$">
  <RequireAll>
    Require all granted
  </RequireAll>
</FilesMatch>

# Block direct access to config
<Files "config.php">
  Require all denied
</Files>

# Set default charset
AddDefaultCharset UTF-8

# Security headers
<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
  Header set X-Frame-Options "SAMEORIGIN"
  Header set X-XSS-Protection "1; mode=block"
</IfModule>

# PHP settings
<IfModule mod_php.c>
  php_value upload_max_filesize 10M
  php_value post_max_size 10M
  php_flag display_errors Off
  php_flag log_errors On
</IfModule>
