# Optional Apache protection starter.
# Put this project behind HTTP Basic Auth, VPN, IP allowlist, or a private/no-A-record host.
# Never expose config/credentials.local.json publicly.

Options -Indexes

<FilesMatch "credentials.*\.json$">
  Require all denied
</FilesMatch>

<FilesMatch "\.(txt|json)$">
  Require all granted
</FilesMatch>