# EliteVault private-platform security
Options -Indexes

# Discourage compliant crawlers and AI/search indexing.
<IfModule mod_headers.c>
    Header always set X-Robots-Tag "noindex, nofollow, noarchive, nosnippet"
</IfModule>

# Protect common sensitive files from direct web access.
<FilesMatch "^(\.env|composer\.(json|lock)|.*\.(sql|log|bak|backup|ini|conf|config))$">
    Require all denied
</FilesMatch>

# Never expose hidden files (except .well-known).
<FilesMatch "^\.(?!well-known)">
    Require all denied
</FilesMatch>

# Block known AI/LLM crawlers by User-Agent.
# Normal human browsers are not affected.
<IfModule mod_rewrite.c>
    RewriteEngine On

    RewriteCond %{HTTP_USER_AGENT} (GPTBot|ChatGPT-User|OAI-SearchBot|Google-Extended|ClaudeBot|anthropic-ai|PerplexityBot|Bytespider|CCBot|Applebot-Extended|Amazonbot|Meta-ExternalAgent|FacebookBot) [NC]
    RewriteRule ^ - [F,L]
</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php81” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php81 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit
