# Protect sensitive files
<FilesMatch "(^\.|config\.php$|install\.lock$)">
  Require all denied
</FilesMatch>

# Prevent directory listing
Options -Indexes

# Default charset
AddDefaultCharset UTF-8

# Enable mod_rewrite
<IfModule mod_rewrite.c>
  RewriteEngine On
</IfModule>

# Gzip compression
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/css text/javascript application/javascript application/json
</IfModule>

# Browser caching for static assets
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/css "access plus 7 days"
  ExpiresByType application/javascript "access plus 7 days"
  ExpiresByType image/jpeg "access plus 30 days"
  ExpiresByType image/png "access plus 30 days"
  ExpiresByType image/svg+xml "access plus 30 days"
  ExpiresByType image/webp "access plus 30 days"
</IfModule>
