Options -Indexes

<Files ".env">
    Require all denied
</Files>

<FilesMatch "^composer\.(json|lock)$">
    Require all denied
</FilesMatch>

<IfModule mod_rewrite.c>
    RewriteEngine On
    # 403 em URLs sob sql/, docs/ e anexos_pendencias/ (anexos seguem só via api/index.php)
    RewriteRule ^(sql|docs|anexos_pendencias)(/|$) - [F,L]
</IfModule>

<IfModule mod_headers.c>
    Header set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
    Header set Pragma "no-cache"
    Header set Expires "0"
</IfModule>

<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresDefault "access plus 0 seconds"
</IfModule>

