Options -Indexes
ServerSignature Off
AddDefaultCharset UTF-8

<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^config/ - [F,L]
  RewriteRule ^includes/ - [F,L]
  RewriteRule ^sql/ - [F,L]
  RewriteRule ^storage/ - [F,L]
  RewriteCond %{HTTP:Authorization} .
  RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
</IfModule>

<FilesMatch "(^\.env|config\.local\.php|\.p8$|composer\.(json|lock)$)">
  Require all denied
</FilesMatch>

<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/css application/javascript application/json
</IfModule>

# Tipos necessários para a visão computacional da Etapa 4
<IfModule mod_mime.c>
  AddType text/javascript .mjs
  AddType application/wasm .wasm
  AddType application/octet-stream .task
</IfModule>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
  Header always set Permissions-Policy "camera=(self), microphone=(), geolocation=()"

  <FilesMatch "\.(wasm|mjs|task)$">
    Header set Cache-Control "public, max-age=604800, immutable"
  </FilesMatch>
</IfModule>
