# Tally POS — Apache settings (safe to keep; ignored by Nginx/LiteSpeed-without-htaccess)
<IfModule mod_autoindex.c>
    Options -Indexes
</IfModule>

# Never serve these directly
<IfModule mod_authz_core.c>
    <FilesMatch "\.(sql|md|log|lock|sample|dist)$|^config\.php$">
        Require all denied
    </FilesMatch>
</IfModule>

<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
</IfModule>
