Options -Indexes
DirectoryIndex index.html index.php
ErrorDocument 404 /404.html
RewriteEngine On
# Clean API URLs: /api/join -> api/join.php
RewriteRule ^api/(join|announcements)/?$ api/$1.php [L]
# Never serve code, config or SQL
RewriteRule ^(lib|backend)/ - [F,L]
RewriteRule \.(sql|bak|log)$ - [F,L]
<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
  Header set Referrer-Policy "same-origin"
</IfModule>
