# Disable directory listings — visitors cannot browse the folder structure.
Options -Indexes

# Default document is index.html
DirectoryIndex index.html

# Block direct access to JSON files (leads, counter)
<FilesMatch "\.(json)$">
  Require all denied
</FilesMatch>

# Cache static assets for a week
<FilesMatch "\.(png|jpg|jpeg|webp|svg|woff2)$">
  Header set Cache-Control "max-age=604800, public"
</FilesMatch>
