# Mencegah daftar isi direktori tampil
Options -Indexes

# Memblokir file yang dapat menjalankan kode
<FilesMatch "(?i:\.(php|php[0-9]+|phtml|phar|sh|pl|cgi|asp|aspx|jsp|exe|shtml))$">
    Require all denied
</FilesMatch>

# Mengizinkan gambar dan dokumen
<FilesMatch "(?i:\.(jpg|jpeg|png|gif|webp|pdf|doc|docx))$">
    Require all granted
</FilesMatch>

# Header keamanan
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>