# Cloaker-ready (Yusuf): zip has no index.php. Drop Cloaking.House file into public_html.
# Slash -> index.php when present, else index.html. index.html must stay a real 200 file.
# Do not 301 index.html to / — that loops PHP and returns an empty page.
DirectoryIndex index.php index.html
Options -Indexes

<IfModule LiteSpeed>
  RewriteEngine On
  RewriteBase /
  RewriteRule ^index\.html$ - [END]
  RewriteRule ^index\.php$ - [E=Cache-Control:no-cache]
</IfModule>

<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /
  RewriteRule ^index\.html$ - [L]
</IfModule>

<IfModule mod_authz_core.c>
  <FilesMatch "(?i)^(GUVENLIK\.txt|OKU\.txt|\.htaccess|\.htpasswd)$">
    Require all denied
  </FilesMatch>
  <FilesMatch "(?i)^secret\.php$">
    Require all denied
  </FilesMatch>
</IfModule>

<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
  Header set X-Frame-Options "SAMEORIGIN"
  Header set Referrer-Policy "strict-origin-when-cross-origin"
  <Files "data.js">
    Header set Cache-Control "no-store"
  </Files>
  <Files "index.php">
    Header set Cache-Control "no-store"
  </Files>
</IfModule>

<IfModule mod_headers.c>
  <If "%{REQUEST_URI} =~ m#panel-r7k2m9x4q1v8#">
    Header set X-Robots-Tag "noindex, nofollow, noarchive"
    Header set Cache-Control "no-store"
  </If>
</IfModule>
