Options -Indexes
<FilesMatch "^(posts\.json|categories\.json|config\.php)$">
 Require all denied
</FilesMatch>
<IfModule mod_headers.c>
 Header set X-Content-Type-Options nosniff
 Header set Referrer-Policy strict-origin-when-cross-origin
</IfModule>

# Custom static not-found page
ErrorDocument 404 /404.html

# Public generated HTML can be cached at CDN edge; do not cache admin/data endpoints.
<IfModule mod_headers.c>
 <FilesMatch "\.(html)$">
  Header set Cache-Control "public, max-age=0, s-maxage=86400, stale-while-revalidate=600"
 </FilesMatch>
</IfModule>
