# Security settings for Multi-User Transcription Server

# Deny access to data directory
<DirectoryMatch "^.*/data/.*$">
    Require all denied
</DirectoryMatch>

# Deny access to config file directly (if accessed via URL)
<Files "config.php">
    Require all denied
</Files>

# Enable PHP error logging (disable display for production)
php_flag display_errors Off
php_flag log_errors On

# Set upload limits
php_value upload_max_filesize 1M
php_value post_max_size 1M

# Disable directory listing
Options -Indexes

# Enable compression
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/json
</IfModule>

# Set MIME types
AddType application/json .json
AddType text/event-stream .php