# --- Force HTTPS ------------------------------------------------------------
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteCond %{HTTPS} !=on
  RewriteCond %{HTTP:X-Forwarded-Proto} !=https
  RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
</IfModule>

# --- Keep the configuration and the server-side includes out of the browser --
<FilesMatch "^(config\.php|lib\.php|mailer\.php)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>

# --- No directory listings --------------------------------------------------
Options -Indexes

# --- index.php answers for the folder ---------------------------------------
DirectoryIndex index.php
