# .htaccess — Alpha AI Assistant
# Basic hardening + friendly defaults for Apache hosting

# Prevent directory listing
Options -Indexes

# Protect config.php from direct browser access via other vhosts/misconfig
<Files "config.php">
    <IfModule mod_authz_core.c>
        Require all granted
    </IfModule>
</Files>

# Deny access to hidden files (like .env, .git) except this .htaccess itself
<FilesMatch "^\.(?!htaccess)">
    Require all denied
</FilesMatch>

# Set default charset
AddDefaultCharset UTF-8

# Enable PHP error logging but hide errors from output (production safety)
php_flag display_errors off
php_flag log_errors on

# Default document
DirectoryIndex index.php
