# DoctorCare on Thikana — protect app internals.
# Everything OUTSIDE the "THIKANA BACKEND" block below is preserved by
# the platform; do not delete these rules.
RewriteEngine On

# Block the database directory, server code and config files.
RewriteRule ^\.data(/.*)?$ - [F,L]
RewriteRule ^\.git(/.*)?$ - [F,L]
RewriteRule ^node_modules(/.*)?$ - [F,L]
RewriteRule ^(server\.js|package\.json|package-lock\.json|thikana\.json|seed\.json|README-DEPLOY\.md|HOSTING-THIKANA\.md)$ - [F,L]

<FilesMatch "(^\.|\.(json|md|log)$)">
  Require all denied
</FilesMatch>
# Apache 2.2 fallback
<IfModule !mod_authz_core.c>
  <FilesMatch "(^\.|\.(json|md|log)$)">
    Order allow,deny
    Deny from all
  </FilesMatch>
</IfModule>

Options -Indexes
